Mu Dynamics Remediates Open Source VPN Vulnerability in strongSwan IKEv2
TMCnet - The World's Largest Communications and Technology Community
TMC Launches New Sites ::  NGC  |  4GWE  |  Green Tech  |  Satellite  |  IT |  ITEXPO  |  Healthcare  |  Smart Grid  |  M2M  |  Smart Products  |  AstriCon News  |  SATCON News
TMCnet CHANNELS
#1 VoIP Enabler: Risk-free, Quick & Easy Deployment
Advanced Carrier Services
Advanced IP Carrier
Answering Service
Appliance Deployment
ATCA
Auto Dialer
BPA (3rd Party Remote Call Monitoring)
Broadcast Modulator
Business Phone Systems
Business Process Automation
Business VoIP
Call Center
Call Center Certification
Call Center Digital Signage
Call Center Furniture
Call Center Hiring
Call Center Management
Call Center On Demand
Call Center Outsourcing
Call Center Scheduling
Call Center Software
Call Center Solutions
Call Center Training
Call Center Workforce Management
Call Monitoring
Call Recording
Communications Enabled Business Processes
Conference Call
Conferencing
Contact Center Headsets
Contact Center Software
CRM Cloud Computing
CRM Software
CRM Solutions
DID/DDI
Digital Signage
e911
E911 Hosted Solutions
Email Archiving
Email Server
Enterprise Fax over IP
Enterprise VoIP
Ethernet Extender
Fax
Fax Over IP
FoIP
HD Conference
Hosted Contact Center
Hosted PBX
Integrated Communications
IP Fax
IP Multimedia
IP Phone Maker
IP Phone System
IP Phones
IP Transit
IVR
Lead Management Software
Master Agent
Mobile Management
Mobile Unified Communications
Mobile Video
NEBS
Network Installation
Open Source CRM
PBX PCI Adapter
Phone Systems
Portable Satellite Antenna
Predictive Dialer
Sales Software
SATCON
SIP
Speech Recognition and Text to Speech
Telecom Cost Management
Telecom Expense Management
Telecom Lifecycle Management
Telemarketing Software
Telepresence
Testing IP Services
Virtual Call Center
Virtual Office
Virtual PBX
Virtual Receptionist
Voice Broadcast
Voice Management
Voice Over IP
Voice Peering
Voicemail Replacement
VoIP Call Recording
VoIP Contact Center
VoIP Developer
VoIP Gateways
VoIP Monitoring
VoIPSwitch
Web Conferencing
Web Meeting
Wholesale VoIP
Wireless Expense Management
Wireless Management
Workforce Management
Workforce Optimization
Share
TMCnews
[September 26, 2008]

Mu Dynamics Remediates Open Source VPN Vulnerability in strongSwan IKEv2

(Wireless News Via Acquire Media NewsEdge)
Mu Dynamics, a company focusing on helping network operators and their
vendors eliminate downtime through proactive service assurance, has
discovered and helped remediate a dangerous 0-day vulnerability within
strongSwan's IKEv2 implementation.

strongSwan is an open source IPsec-based virtual private network (VPN)
solution for the Linux operating system. IPsec-based VPNs secure
corporate VoIP, email, web, IPTV and other IP-based services over
public network infrastructures.

According to the company, a precise sequence of complex events (the
IKEv2 protocol) is required to establish VPN connectivity. strongSwan
includes an Internet Key Exchange version 2 implementation (IKEv2) to
authenticate users and establish session keys, enabling Internet
Protocol (IP) traffic to be encrypted and/or digitally signed within
IPsec-based VPNs. Mu Labs discovered that an unauthenticated anonymous
attacker could crash a strongSwan-based VPN terminator or other IPsec
device using only the very first IKEv2 packet.



"The best defense against this 0-day vulnerability is to immediately
upgrade to the patched version of strongSwan," said Thomas Maufer, Mu
Dynamics' Director of Technical Marketing. "The Mu Labs development
team appreciates strongSwan's extremely rapid response time in
producing a fix to this serious bug in just one day."

((Comments on this story may be sent to newsdesk@closeupmedia.com))



((Distributed on behalf of 10Meters via M2 Communications Ltd -
http://www.m2.com))
((10Meters - http://www.10meters.com))

Copyright ? 2008 Wireless News

[ Back To TMCnet.com's Homepage ]
Discussions:
Be the first to post a comment on this page!
 
By  
TMCnet
+ Add to the Discussion
Bookmark mobile.TMCnet.com on your mobile phone now to stay on top of the latest tech news.
Featured White Papers
Featured White Paper RSS feed
10 reasons to switch to an IP PBX
Application Whitelisting: A new security paradigm
SCADA Systems Protection
view all white papers…
Top Stories
Today's TMCnet Top Stories and News Articles
Shazam Announces Availability of (RED) App
UC's Logicalis Moves Dallas Office to Plano
Wild for Animal Prints? Try This Flip
IP Fax Podcast: Blending IP Fax Services with Microsoft Exchange
Internet Use in the Classroom is Low: Report
more of today's top stories...
Related VoIP News
Latest IP Communitions and VoIP News
In-Stat: Unified Communications Migrating to the Cloud
Frost & Sullivan Study: Virtualization Market in India to Grow Significantly
Windstream Announces Acquisition of Iowa Telecommunications Services
Teledata ICT of Ghana Using VocalTec's Essentra BAX VoIP Application Server
Sendmail, Osterman Detect E-Mail Cloud Trends

Subscribe FREE to all of TMC's monthly magazines. Click here now.