A security vulnerability in the way @Home handles IP address assignment (DHCP based) allows attackers to hijack IP addresses of other @Home users by very simple means.
Credit:
The information has been provided by Roadkill Randu.
The @Home network assigns IP addresses on a fairly permanent basis to its subscribers, but it does use DHCP for IP address assignment. It is trivial matter, however, to take over another @Home account's IP address by providing another customer's ID for the hostname parameter in DHCP. It is also trivial to acquire this hostname parameter, since all it requires is 'host @HomeIPaddress' to determine what the customer ID is.
Notification:
@Home has been notified about this problem twice in the last two months, no response has been received.
