110 matches found
CVE-2002-0849
CVE-2002-0849 : The Linux-iSCSI implementation installs the iscsi.conf file with world-readable permissions on some OSes (e.g., Red Hat Linux Limbo Beta #1), which could allow local users to gain privileges by reading the cleartext CHAP password. Root cause: file permissions on iscsi.conf. Impact...
CVE-2002-0849
Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta 1, which could allow local users to gain privileges by reading the cleartext CHAP password...
iDEFENSE Security Advisory: iSCSI Default Configuration File Settings
iDEFENSE Security Advisory 08.08.2002 iSCSI Default Configuration File Settings DESCRIPTION iSCSI is a popular new protocol that allows the SCSI protocol to be used over traditional IP networks. This allows for SAN like storage arrays without requiring new network infrastructure. iSCSI’s primary...
more RADIUS authentication attack scenarios
Hello bugtraq, There is also problem with some vendor-specific RADIUS authentication implementation. For example Microsoft has it's specific attributes defined in RFC 2548. These attributes allow MS-CHAP and MS-CHAPv2 authentication via RADIUS. There is design flow in this authentication scenario...
Дырка в Tigris
Если клиент первый раз указывает неправильный пароль при CHAP/PAP-авторизации, то не создается аккаунтинговой записи в RADIUS...
CVE-1999-0160
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections...
CVE-1999-0160
CVE-1999-0160 affects classic Cisco IOS devices and involves a vulnerability in PPP CHAP authentication that can allow establishing unauthorized PPP connections. The described issue targets PPP CHAP authentication in Cisco IOS software (not necessarily all platforms) and is noted in several sourc...
pptp.revisited.txt
Date: Sat, 13 Feb 1999 11:28:40 -0800 From: [email protected] To: [email protected] Subject: PPTP Revisited The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. Lots of people have aske...
