OSVDB ID: 24025

Title: FreeRADIUS EAP-MSCHAPv2 Crafted Client State Machine Authentication Bypass

Info

Disclosure

Mar 20, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Disclosure: Vendor Verified

Solution

Upgrade to version 1.1.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1015795
Secunia Advisory ID: 19300 19405 19518 19527 19570 19811 20461
CVE ID: 2006-1354 (see also: NVD)
SCIP VulDB ID: 2094
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc http://www.trustix.org/errata/2006/0020/
http://www.us.debian.org/security/2006/dsa-1089
Other Advisory URL: http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html
http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml
Vendor Specific News/Changelog Entry: http://www.freeradius.org/security.html
RedHat RHSA: RHSA-2006:0271

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/24025