Bug 186084 - CVE-2006-1354 FreeRADIUS authentication bypass
Summary: CVE-2006-1354 FreeRADIUS authentication bypass
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: freeradius
Version: 5
Hardware: All
OS: Linux
medium
high
Target Milestone: ---
Assignee: Thomas Woerner
QA Contact:
URL:
Whiteboard: source=secalert,reported=20060321,pub...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-03-21 15:26 UTC by Josh Bressers
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-08-29 09:12:57 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Josh Bressers 2006-03-21 15:26:13 UTC 
FreeRADIUS authentication bypass

A bug in the EAP-MSCHAPv2 module could allow an attacker to
improperly authenticate as an aribitrary user.

http://www.freeradius.org/security.html


This issue also affects FC4
Comment 1 Josh Bressers 2006-03-21 15:29:10 UTC 
Attachment 126403 [details] is the upstream fix from CVS.
Comment 2 Thomas Woerner 2007-08-29 09:12:57 UTC 
FC-5 is EOL - closing
Note You need to log in before you can comment on or make changes to this bug.