OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: IP Spoofing with DHCP ?
From: Matthew S. Hallacy (mhallacyMERCURY.XTRATYME.COM)
Date: Mon Sep 18 2000 - 02:02:38 CDT

You could just as easily (as the attacker) set your IP staticly.

                        -poptix

On Mon, 18 Sep 2000, Skreel wrote:

> Hi I have a question concerning the DHCP protocol. I've heard that
> this protocol could allow a user to choose he's own IP address if it
> isn't already assigned to another user. I was wondering if a network
> using DHCP to assign IP addresses and authenticating users upon
> their IP address could lead to a breach (i know authentication upon
> IP address has never been a good security) but in theory would it be
> possible for an attacant to DoS a user's box and then spoof his IP
> before the ping timeout in order to be authentified as the user ?
>
> Thanks for the help
>