Project

General

Profile

Actions

Bug #2958

open

OsmoSGSN doesn't authenticate on second/further ATTACH REQUEST

Added by laforge almost 4 years ago. Updated about 2 years ago.

Status:
Stalled
Priority:
Normal
Assignee:
sysmocom
Category:
-
Target version:
-
Start date:
02/17/2018
Due date:
% Done:

50%

Spec Reference:
Tags:

Description

When a new/unknown MS performs an ATTACH REQUEST for the first time, it is authenticated.

However, if that same MS later performs a second ATTACH REQUEST, even with new P-TMSI/TLLI, it is not authenticated and we simply send an ATTACH ACCEPT. This is a security problem, as it means anyone can impersonate other known-existing IMSIs.


Files


Related issues

Related to OsmoSGSN - Bug #3302: implement a FSM for GMM Attach RequestClosedlynxis05/29/2018

Actions
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)