Inter-protocol exploitation
- Inter-protocol exploitation
-
Inter-protocol exploitation is a security vulnerability that takes advantage of interactions between two communication protocols, for example the protocols used in the Internet. Under this name, it was popularized in 2007 and publicly described in research[1] of the same year. The general class of attacks that it refers to has been known since at least 1994 (see the Security Considerations section of RFC 1738).
Internet protocol implementations allow for the possibility of encapsulating exploit code to compromise a remote program which uses a different protocol. Inter-protocol exploitation is where one protocol attacks a service running a different protocol. This is a legacy problem because the specifications of the protocols did not take into consideration an attack of this type.
Technical details
The two protocols involved in the vulnerability are the carrier and target. The carrier encapsulates the exploit code and the target protocol is used for communication by the intended victim service. Inter-protocol exploitation will be successful if the carrier protocol can encapsulate the exploit code which can take advantage of a target service. Also, there may be other preconditions depending on the complexity of the vulnerability.
Current implications
One of the major points of concern is the potential for this attack vector to reach through firewalls and DMZs. Inter-protocol exploits can be transmitted over HTTP and launched from web browsers on an internal subnet. An important point is the web browser is not exploited though any conventional means.
References
External links
Wikimedia Foundation.
2010.
Look at other dictionaries:
Inter-protocol communication — [cite web|url=http://www.ngssoftware.com/research/papers/InterProtocolCommunication.pdf|title=Inter protocol Communication|date=2006 08|] is a security vulnerability in the fundamentals of a network communication protocol. Whilst other protocols… … Wikipedia
Adresse Internet Protocol — Adresse IP Une adresse IP (avec IP pour Internet Protocol) est le numéro qui identifie chaque ordinateur connecté à Internet, ou plus généralement et précisément, l interface avec le réseau de tout matériel informatique (routeur, imprimante)… … Wikipédia en Français
D54 (protocol) — D54 is an analogue lighting communications protocol used to control stage lighting. It was developed by Strand Lighting in the late 70s and originally designed to handle 384 channels. Though more advanced protocols exist such as Digital MultipleX … Wikipedia
international relations — a branch of political science dealing with the relations between nations. [1970 75] * * * Study of the relations of states with each other and with international organizations and certain subnational entities (e.g., bureaucracies and political… … Universalium
6LoWPAN — est l acronyme de IPv6 Low power Wireless Personal Area Networks[note 1] ou IPv6 LoW Power wireless Area Networks[note 2]. C est également le nom d un groupe de travail de l IETF. Le groupe 6LoWPAN a défini les mécanismes d encapsulation et de… … Wikipédia en Français
human rights — fundamental rights, esp. those believed to belong to an individual and in whose exercise a government may not interfere, as the rights to speak, associate, work, etc. [1785 95] * * * Rights that belong to an individual as a consequence of being… … Universalium
India — /in dee euh/, n. 1. Hindi, Bharat. a republic in S Asia: a union comprising 25 states and 7 union territories; formerly a British colony; gained independence Aug. 15, 1947; became a republic within the Commonwealth of Nations Jan. 26, 1950.… … Universalium
Italy — /it l ee/, n. a republic in S Europe, comprising a peninsula S of the Alps, and Sicily, Sardinia, Elba, and other smaller islands: a kingdom 1870 1946. 57,534,088; 116,294 sq. mi. (301,200 sq. km). Cap.: Rome. Italian, Italia. * * * Italy… … Universalium
Germany — /jerr meuh nee/, n. a republic in central Europe: after World War II divided into four zones, British, French, U.S., and Soviet, and in 1949 into East Germany and West Germany; East and West Germany were reunited in 1990. 84,068,216; 137,852 sq.… … Universalium
International human rights law — refers to the body of international law designed to promote and protect human rights at the international, regional and domestic levels. As a form of international law, international human rights law is primarily made up of treaties, agreements… … Wikipedia
