Nerd Alert: VPN Security Hole Could Allow DOS Attack

From a CNet News.com article:

Finnish researchers at the University of Oulu announced Monday that they have found a vulnerability in the Internet Security Association and Key Management Protocol, or ISAKMP. The technology is used in IPsec virtual private network and firewall products from a range of networking companies, including giants Cisco Systems and Juniper Networks.

Since IPSec seems to be the majority of the VPNs, this is a big deal. Denial of Service Attacks (DOS) are a favorite of the naughty nerd community.