Re: VPN hijacking

[John Duksta <jduksta () GENUITY COM>]

Ishai,

While I haven't seen an incident of it. Yes, this could happen.
A machine could be trojaned with BO2k or Netbus and the private
network being accessed via the VPN could be accessed by the attacker.

However in defense of this kind of attack, most VPN clients include
a 'blocking' mode that will not allow any other traffic to the
client while the VPN is active.

I know this is pedantic, but I would be reluctant to call this
kind of attack a "VPN hijack". Technically, a VPN hijack would
require you to takeover the data stream of the VPN itself and
insert yourself in that way, which would be rather difficult.

Regards,

-john

"Wertheimer, Ishai" wrote:
> Hi,
>
> Did any of you come across an incident of VPN hijacking? Theoretically, if I
> use an unprotected client to access the VPN, if someone hacks into my client
> PC, he can hijack the session. Did this ever happen ?
>
> Thanks,
>
> Ishai Wertheimer