The security of the quantum secure direct communication (QSDC) and authentication protocol based on Bell states is analyzed.It is shown that an eavesdropper can invalidate the authentication function, and implement a successful man-in-the-middle attack, where he/she can obtain or even modify the transmitted secret without introducing any error.The particular attack strategy is demonstrated and an improved protocol is presented.