FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1354

This CVE name corresponds to:

Entered Topic
2006-06-08 freeradius -- authentication bypass vulnerability
2006-03-29 freeradius -- EAP-MSCHAPv2 Authentication Bypass

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-1354
Phase Assigned(20060321)

Description

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

References

Source Reference
CONFIRM http://www.freeradius.org/security.html
DEBIAN DSA-1089
GENTOO GLSA-200604-03
MANDRIVA MDKSA-2006:060
REDHAT RHSA-2006:0271
SGI 20060404-01-U
SUSE SUSE-SA:2006:019
TRUSTIX 2006-0020
BID 17171
OVAL oval:org.mitre.oval:def:10156
VUPEN ADV-2006-1016
SECTRACK 1015795
SECUNIA 19300
SECUNIA 19405
SECUNIA 19518
SECUNIA 19527
SECUNIA 19811
SECUNIA 20461
XF freeradius-eap-mschapv2-auth-bypass(25352)