CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

Juniper SBR V 6.0.1 CRL-Checking problem

We tried to setup crl-checking on den sbr v 6.0.1 Steel Belted RADIUS. The URL socket is located on the RSA Authenticationsever V 6.7. Radius authentication via EAP TLS should not work because the SBR got a "CRL Fetch: HTTP socket connect failure from one of...

FreeRADIUS memory leak

Memory leak on large number of EAP-TLS requests leads to Denial of Service conditions...

CVE-2004-1099

Cisco Secure Access Control Server for Windows ACS Windows and Cisco Secure Access Control Server Solution Engine ACS Solution Engine 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and...

CVE-2004-1099

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1 are affected when EAP-TLS is enabled. They do not properly handle expired or untrusted certificates, allowing remote attackers to bypass authentication a...

Cisco Secure ACS protection bypass

IF EAP-TLS is used validity of ceritifcation agency is not checked...

Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication Revision 1.0 For Public Release 2004 November 2 1500 UTC GMT - ---------------------------------------------------------------------- Contents Summary...

Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication

...