{"id":213135,"date":"2011-12-15T10:55:01","date_gmt":"2011-12-15T09:55:01","guid":{"rendered":"http:\/\/172.22.49.24\/?p=80"},"modified":"2011-12-15T10:55:01","modified_gmt":"2011-12-15T09:55:01","slug":"ipv6-et-la-securite-nouvelles-du-front","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front\/","title":{"rendered":"IPv6 and security: news from the front"},"content":{"rendered":"

Depuis plusieurs ann\u00e9es, Intrinsec s’int\u00e9resse \u00e0 l’IPv6 et \u00e0 l’impact de ce protocole sur la s\u00e9curit\u00e9 des syst\u00e8mes d’information. Face aux demandes et pour anticiper celles \u00e0 venir, nous intensifions notre travail dans ce domaine.<\/p>\n

C’est pourquoi nous publierons r\u00e9guli\u00e8rement des articles traitant de l’actualit\u00e9 en rapport avec l’IPv6 et son impact sur la s\u00e9curit\u00e9. Voici le premier de cette s\u00e9rie d’articles.
\n
\nArticles<\/span><\/span>\u00a0publi\u00e9s<\/span><\/strong><\/p>\n

Fernando Gont a publi\u00e9 un article traitant de l’impact d’IPv6 sur les pare-feu :\u00a0IPv6 firewall security: Fixing issues introduced by the new protocol<\/a>. L’id\u00e9e principale est qu’il est plus compliqu\u00e9 et couteux en ressources d’analyser un paquet IPv6 qu’IPv4. Cela est principalement d\u00fb au fait qu’il faut analyser tous les Extension Header avant de pouvoir obtenir des informations sur le protocole de couche 4 – transport. Les technologies de transition IPv4\/IPv6 apportent aussi leur lot de complications. Par cons\u00e9quent, il y a potentiellement plus de possibilit\u00e9s de d\u00e9ni de service et d’\u00e9vasion sur les pare-feu.<\/p>\n

Marc Heuse a mis \u00e0 jour le diaporama\u00a0<\/a>qu’il avait pr\u00e9sent\u00e9 au IPv6-Kongress en mai dernier :\u00a0IPv6: Vulnerabilities, Failures – and a Future ?<\/a>. Il fait une rapide introduction \u00e0 IPv6 puis un tour des attaques propres \u00e0 IPv6 et enfin un retour sur l’attitude des vendeurs face aux vuln\u00e9rabilit\u00e9s li\u00e9es \u00e0 IPv6.<\/p>\n

Un article, intitul\u00e9\u00a0Hackers target IPv6<\/a>, faisant un point sur l’\u00e9tat du d\u00e9ploiement d’IPv6 \u00e0 l’heure actuelle et l’impact sur la s\u00e9curit\u00e9 a aussi \u00e9t\u00e9 publi\u00e9.<\/p>\n

Vuln\u00e9rabilit\u00e9s d\u00e9couvertes<\/strong><\/span><\/p>\n

La vuln\u00e9rabilit\u00e9\u00a0CVE-2011-2059<\/a>\u00a0permet d’identifier la pr\u00e9sence d’un routeur Cisco. Cette vuln\u00e9rabilit\u00e9 a pour origine l’ajout d’une fonctionnalit\u00e9 surprenante :<\/p>\n

\u00ab Back in 2003, a Cisco Technical Assistance Center (TAC) engineer made a very simple request: […] it would be nice to have a way to generate (within Cisco IOS itself) an IPv6 packet that, when received by a Cisco IOS device, would be punted to the CPU and out of the CEF path. This was indeed considered useful, and was hence implemented […] within Cisco IOS. \u00bb (source<\/a>)<\/p>\n

Outils<\/strong><\/span><\/p>\n

thc-ipv6<\/a>\u00a0est une suite d’outils permettant de r\u00e9aliser des attaques sur le protocole IPv6. Marc Heuse a annonc\u00e9 que la prochaine version sera publi\u00e9e entre mars et mai 2012. Il n’y aura plus qu’une seule version et non deux, l’une publique et l’autre priv\u00e9e, comme c’est le cas actuellement.<\/p>\n

Image<\/strong><\/span><\/p>\n

Pour finir cet article avec une note d’humour (source<\/a>) :<\/p>\n

\"IPv6<\/p>\n","protected":false},"excerpt":{"rendered":"

Depuis plusieurs ann\u00e9es, Intrinsec s’int\u00e9resse \u00e0 l’IPv6 et \u00e0 l’impact de ce protocole sur la […]<\/p>\n","protected":false},"author":13,"featured_media":51,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46],"class_list":["post-213135","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-veille-securite","tag-ipv6"],"yoast_head":"\nIPv6 et la s\u00e9curit\u00e9 : nouvelles du front - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front\" \/>\n<meta property=\"og:description\" content=\"Depuis plusieurs ann\u00e9es, Intrinsec s’int\u00e9resse \u00e0 l’IPv6 et \u00e0 l’impact de ce protocole sur la […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2011-12-15T09:55:01+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front\",\"datePublished\":\"2011-12-15T09:55:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/\"},\"wordCount\":444,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"IPv6\"],\"articleSection\":[\"Veille S\u00e9curit\u00e9\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/\",\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2011-12-15T09:55:01+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IPv6 and Security: News from the Front - INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front\/","og_locale":"en_US","og_type":"article","og_title":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front","og_description":"Depuis plusieurs ann\u00e9es, Intrinsec s’int\u00e9resse \u00e0 l’IPv6 et \u00e0 l’impact de ce protocole sur la […]","og_url":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front\/","og_site_name":"INTRINSEC","article_published_time":"2011-12-15T09:55:01+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front","datePublished":"2011-12-15T09:55:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/"},"wordCount":444,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#primaryimage"},"thumbnailUrl":"","keywords":["IPv6"],"articleSection":["Veille S\u00e9curit\u00e9"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/","url":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/","name":"IPv6 and Security: News from the Front - INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#primaryimage"},"thumbnailUrl":"","datePublished":"2011-12-15T09:55:01+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/213135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=213135"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/213135\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/pages\/51"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=213135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=213135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=213135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}