Re: VALN hopping

[David Barroso <dbarroso () s21sec com>]

On Wed, 05 Oct 2005, Joshua Berry wrote:

> VLAN's can certainly be bypassed as long as they are not setup properly.
> @stake did a security review of VLAN's which can be found here:
> http://www.cisco.com/warp/public/cc/pd/si/casi/ca6000/tech/stake_wp.pdf
>
> And cisco has their own documentation on it here:
> http://www.cisco.com/warp/public/cc/pd/si/casi/ca6000/prodlit/vlnwp_wp.p
> df
>
> These outline potential problems and their solutions.  I would be a
> little skeptical if it was only Cisco doing the research into VLAN
> exploitation but I am a little more comfortable since @stake did
> research into it as well. 

Yes, but the research date is August 2002. Three years is more than enough
time for changes.