Distributed weakness in virtual private networks
Samuel T. Patton, D. Doss, William J. Yurcik · 2002
The use of virtual private networks is increasing rapidly primarily due to security concerns. As the result of analyzing actual corporate VPN strategies, we identify a common vulnerability we name "distributed weakness in VPNs". Specifically we describe a simple routing attack that can be launched against VPN tunnel endpoints with significant implications. We close with a solution to protect against exploitation of this vulnerability.