{"id":228040,"date":"2012-01-16T15:53:37","date_gmt":"2012-01-16T14:53:37","guid":{"rendered":"http:\/\/172.22.49.24\/?p=268"},"modified":"2012-01-16T15:53:37","modified_gmt":"2012-01-16T14:53:37","slug":"ipv6-et-la-securite-nouvelles-du-front-janvier-4","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/","title":{"rendered":"IPv6 and security: news from the front \u2013 January"},"content":{"rendered":"

Cet article est un r\u00e9sum\u00e9 de l’actualit\u00e9 li\u00e9e \u00e0 IPv6 et la s\u00e9curit\u00e9, dans le m\u00eame esprit que celui publi\u00e9 le mois dernier.<\/p>\n

Articles publi\u00e9s<\/span><\/strong><\/p>\n

Rafa Sanchez publie une s\u00e9rie d’articles intitul\u00e9e \u00ab\u00a0Hacking\u00a0 IPv6<\/a>\u00a0\u00bb traitant d’attaques r\u00e9alisables sur le protocole IPv6. Trois articles sur les\u00a0six de la s\u00e9rie ont \u00e9t\u00e9 publi\u00e9s jusqu’\u00e0 pr\u00e9sent. Les articles ne pr\u00e9sentent pas de nouvelles m\u00e9thodes d’attaques mais les exemples sont d\u00e9taill\u00e9s et clairs.
\nXavier Mertens a d\u00e9velopp\u00e9 un outil pour d\u00e9tecter des rogues routeurs :\u00a0rrhunter<\/a>. Il a publi\u00e9 un article intitul\u00e9 \u00ab\u00a0rrhunter: Detecting Rogue IPv6 Routers<\/a>\u00a0\u00bb sur son blog d\u00e9taillant l’int\u00e9r\u00eat d’une attaque \u00ab rogue routeur \u00bb et comment d\u00e9tecter une telle attaque.<\/p>\n

Conf\u00e9rences<\/strong><\/span><\/p>\n

Fernando Gont a publi\u00e9 les\u00a0slides<\/a>\u00a0de sa pr\u00e9sentation intitul\u00e9e \u00ab Hacking IPv6 Networks \u00bb utilis\u00e9es lors de la conf\u00e9rence DEEPSEC en novembre dernier. Il y fait des rappels rapides sur l’IPv6 et un tour plut\u00f4t complet des vuln\u00e9rabilit\u00e9s et attaques li\u00e9es \u00e0 IPv6 (il y a 214 slides). Le support de la pr\u00e9sentation est tr\u00e8s int\u00e9ressant.<\/p>\n

RFC<\/strong><\/span><\/p>\n

La\u00a0RFC 6434<\/a>, \u00ab IPv6 Node Requirements \u00bb, a \u00e9t\u00e9 publi\u00e9e en d\u00e9cembre et met \u00e0 jour la\u00a0RFC 4294<\/a>\u00a0qui datait de 2006. Cette RFC\u00a0d\u00e9finit les \u00e9l\u00e9ments n\u00e9cessaires \u00e0 impl\u00e9menter dans une pile IPv6. Concernant la s\u00e9curit\u00e9,\u00a0une pile IPv6 ne doit d\u00e9sormais plus obligatoirement supporter IPsec pour \u00eatre conforme avec les RFC :
\n\u2022\u00a0RFC 4294 : \u00ab Security Architecture for the Internet Protocol [RFC-4301] MUST be supported. \u00bb
\n\u2022\u00a0RFC 6434 : \u00ab Security Architecture for the Internet Protocol\u00a0\u00bb [RFC4301] SHOULD be supported by all IPv6 nodes. \u00bb<\/p>\n

Vuln\u00e9rabilit\u00e9s<\/strong><\/span><\/p>\n

Une vuln\u00e9rabilit\u00e9,\u00a0CVE-2011-4868<\/a>,\u00a0 dans le serveur dhcpd de ISC BIND a \u00e9t\u00e9 corrig\u00e9e. Cette vuln\u00e9rabilit\u00e9 permet de causer un d\u00e9ni de service en faisant planter le processus. Elle est due \u00e0 une mauvaise gestion de Dynamic DNS avec des adresses IPv6 dans le m\u00e9canisme de log.<\/p>\n","protected":false},"excerpt":{"rendered":"

Cet article est un r\u00e9sum\u00e9 de l’actualit\u00e9 li\u00e9e \u00e0 IPv6 et la s\u00e9curit\u00e9, dans le […]<\/p>\n","protected":false},"author":13,"featured_media":51,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46],"class_list":["post-228040","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-veille-securite","tag-ipv6"],"yoast_head":"\nIPv6 et la s\u00e9curit\u00e9 : nouvelles du front - janvier - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front - janvier\" \/>\n<meta property=\"og:description\" content=\"Cet article est un r\u00e9sum\u00e9 de l’actualit\u00e9 li\u00e9e \u00e0 IPv6 et la s\u00e9curit\u00e9, dans le […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2012-01-16T14:53:37+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front – janvier\",\"datePublished\":\"2012-01-16T14:53:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/\"},\"wordCount\":348,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"IPv6\"],\"articleSection\":[\"Veille S\u00e9curit\u00e9\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/\",\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front - janvier - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2012-01-16T14:53:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front – janvier\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IPv6 and Security: News from the Front - January - INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/","og_locale":"en_US","og_type":"article","og_title":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front - janvier","og_description":"Cet article est un r\u00e9sum\u00e9 de l’actualit\u00e9 li\u00e9e \u00e0 IPv6 et la s\u00e9curit\u00e9, dans le […]","og_url":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/","og_site_name":"INTRINSEC","article_published_time":"2012-01-16T14:53:37+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front – janvier","datePublished":"2012-01-16T14:53:37+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/"},"wordCount":348,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#primaryimage"},"thumbnailUrl":"","keywords":["IPv6"],"articleSection":["Veille S\u00e9curit\u00e9"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/","url":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/","name":"IPv6 and Security: News from the Front - January - INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#primaryimage"},"thumbnailUrl":"","datePublished":"2012-01-16T14:53:37+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-janvier-4\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front – janvier"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=228040"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228040\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/pages\/51"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=228040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=228040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=228040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}