xsupplicant eap.c eap_do_notify() Function Overflow

ID OSVDB:30092
Type osvdb
Reporter OSVDB
Modified 2006-10-03T05:48:57


Solution Description

Upgrade to version 1.2.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.


Vendor Specific News/Changelog Entry: http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136 Vendor Specific Advisory URL Secunia Advisory ID:22612 Secunia Advisory ID:22641 Secunia Advisory ID:23870 Related OSVDB ID: 30093 Other Advisory URL: http://open1x.sourceforge.net/ Other Advisory URL: http://www.novell.com/linux/security/advisories/2007_01_sr.html ISS X-Force ID: 29902 FrSIRT Advisory: ADV-2006-4233 CVE-2006-5601 Bugtraq ID: 20775