Lucene search
RedhatCVE-2011-4966HistoryMar 12, 2013 - 11:55 p.m.
CVE-2011-4966
2013-03-1223:55:01
CWE-255
redhat
web.nvd.nist.gov
151
freeradius
rlm_unix
user authentication
password expiration
cve-2011-4966
nvd
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
70.9%
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Affected configurations
Node
freeradiusfreeradius
ORfreeradiusfreeradiusRange≤2.2.0
ORfreeradiusfreeradiusMatch0.1
ORfreeradiusfreeradiusMatch0.2
ORfreeradiusfreeradiusMatch0.3
ORfreeradiusfreeradiusMatch0.4
ORfreeradiusfreeradiusMatch0.5
ORfreeradiusfreeradiusMatch0.6
ORfreeradiusfreeradiusMatch0.7
ORfreeradiusfreeradiusMatch0.7.1
ORfreeradiusfreeradiusMatch0.8
ORfreeradiusfreeradiusMatch0.8.1
ORfreeradiusfreeradiusMatch0.9
ORfreeradiusfreeradiusMatch0.9.0
ORfreeradiusfreeradiusMatch0.9.1
ORfreeradiusfreeradiusMatch0.9.2
ORfreeradiusfreeradiusMatch0.9.3
ORfreeradiusfreeradiusMatch1.0.0
ORfreeradiusfreeradiusMatch1.0.1
ORfreeradiusfreeradiusMatch1.0.2
ORfreeradiusfreeradiusMatch1.0.3
ORfreeradiusfreeradiusMatch1.0.4
ORfreeradiusfreeradiusMatch1.0.5
ORfreeradiusfreeradiusMatch1.1.0
ORfreeradiusfreeradiusMatch1.1.1
ORfreeradiusfreeradiusMatch1.1.2
ORfreeradiusfreeradiusMatch1.1.3
ORfreeradiusfreeradiusMatch1.1.4
ORfreeradiusfreeradiusMatch1.1.5
ORfreeradiusfreeradiusMatch1.1.6
ORfreeradiusfreeradiusMatch1.1.7
ORfreeradiusfreeradiusMatch1.1.8
ORfreeradiusfreeradiusMatch2.0
ORfreeradiusfreeradiusMatch2.0.1
ORfreeradiusfreeradiusMatch2.0.2
ORfreeradiusfreeradiusMatch2.0.3
ORfreeradiusfreeradiusMatch2.0.4
ORfreeradiusfreeradiusMatch2.0.5
ORfreeradiusfreeradiusMatch2.1.0
ORfreeradiusfreeradiusMatch2.1.1
ORfreeradiusfreeradiusMatch2.1.2
ORfreeradiusfreeradiusMatch2.1.3
ORfreeradiusfreeradiusMatch2.1.4
ORfreeradiusfreeradiusMatch2.1.6
ORfreeradiusfreeradiusMatch2.1.7
ORfreeradiusfreeradiusMatch2.1.8
ORfreeradiusfreeradiusMatch2.1.9
ORfreeradiusfreeradiusMatch2.1.10
ORfreeradiusfreeradiusMatch2.1.11
ORfreeradiusfreeradiusMatch2.1.12
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freeradius | freeradius | * | cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.1 | cpe:2.3:a:freeradius:freeradius:0.1:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.2 | cpe:2.3:a:freeradius:freeradius:0.2:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.3 | cpe:2.3:a:freeradius:freeradius:0.3:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.4 | cpe:2.3:a:freeradius:freeradius:0.4:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.5 | cpe:2.3:a:freeradius:freeradius:0.5:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.6 | cpe:2.3:a:freeradius:freeradius:0.6:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.7 | cpe:2.3:a:freeradius:freeradius:0.7:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.7.1 | cpe:2.3:a:freeradius:freeradius:0.7.1:*:*:*:*:*:*:* |
| freeradius | freeradius | 0.8 | cpe:2.3:a:freeradius:freeradius:0.8:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2013-03-12 23:55:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0356-1)
2021-06-09 00:00:00
RedHat Update for freeradius2 RHSA-2013:0134-01
2013-01-11 00:00:00
CentOS Update for freeradius2 CESA-2013:0134 centos5
2013-01-21 00:00:00
nessus
nessus
openSUSE Security Update : freeradius-server (openSUSE-SU-2013:0137-1)
2014-06-13 00:00:00
SuSE 11.2 Security Update : freeradius (SAT Patch Number 7255)
2013-02-28 00:00:00
ubuntucve
ubuntucve
CVE-2011-4966
2013-03-12 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:50:49
nvd
nvd
CVE-2011-4966
2013-03-12 23:55:01
redhat
redhat
(RHSA-2013:0134) Low: freeradius2 security and bug fix update
2013-01-08 00:00:00
debiancve
debiancve
CVE-2011-4966
2013-03-12 23:55:01
centos
centos
freeradius2 security update
2013-01-09 19:53:35
cvelist
cvelist
CVE-2011-4966
2013-03-12 22:00:00
cbl_mariner
cbl_mariner
CVE-2011-4966 affecting package freeradius 3.2.3-2
2024-09-19 09:11:59
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2014-02-26 00:00:00
securityvulns
securityvulns
FreeRADIUS security vulnerabilities
2014-02-28 00:00:00
[USN-2122-1] FreeRADIUS vulnerabilities
2014-02-28 00:00:00
oraclelinux
oraclelinux
freeradius2 security and bug fix update
2013-01-11 00:00:00
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
70.9%
Related for CVE-2011-4966