Published: 22/03/2006 Updated: 11/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote malicious users to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeradius freeradius 1.0.5
freeradius freeradius 1.1.0
freeradius freeradius 1.0.0
freeradius freeradius 1.0.3
freeradius freeradius 1.0.4
freeradius freeradius 1.0.1
freeradius freeradius 1.0.2

Debian Bug report logs - #359042 [CVE-2006-1354] EAP-MSCHAPv2 vulnerability Package: freeradius; Maintainer for freeradius is Debian FreeRADIUS Packaging Team <pkg-freeradius-maintainers@listsaliothdebianorg>; Source for freeradius is src:freeradius (PTS, buildd, popcon) Reported by: Florian Weimer <fw@denebenyode&gt ...

Several problems have been discovered in freeradius, a high-performance and highly configurable RADIUS server The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4744 SuSE researchers have discovered several off-by-one errors may allow remote attackers to cause a denial of service and possibly ...

NVD-CWE-Other http://www.freeradius.org/security.html http://secunia.com/advisories/19300 http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html http://www.securityfocus.com/bid/17171 http://securitytracker.com/id?1015795 http://secunia.com/advisories/19405 http://www.trustix.org/errata/2006/0020 http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml http://rhn.redhat.com/errata/RHSA-2006-0271.html http://secunia.com/advisories/19518 http://secunia.com/advisories/19527 ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc http://secunia.com/advisories/19811 http://www.debian.org/security/2006/dsa-1089 http://secunia.com/advisories/20461 http://www.mandriva.com/security/advisories?name=MDKSA-2006:060 http://www.vupen.com/english/advisories/2006/1016 https://exchange.xforce.ibmcloud.com/vulnerabilities/25352 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359042 https://nvd.nist.gov https://www.debian.org/security/./dsa-1089

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-1354

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect