SuSE 10 Security Update : xsupplicant (ZYPP Patch Number 2455)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : - A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stackbuffer and so potentially execute code. CVE-2006-5601 %NASLMINLEVEL 70300 C...

CVE-2007-5651

Unspecified vulnerability in the Extensible Authentication Protocol EAP implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges Wireless EAP devices, IOS 12.1 and 12.2 on Cisco switches Wired EAP devices, and CatOS 6.x through 8.x on Cisco switches allows remote...

Authentication flaw

Unspecified vulnerability in the Extensible Authentication Protocol EAP implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges Wireless EAP devices, IOS 12.1 and 12.2 on Cisco switches Wired EAP devices, and CatOS 6.x through 8.x on Cisco switches allows remote...

CVE-2007-5651

Unspecified vulnerability in the Extensible Authentication Protocol EAP implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges Wireless EAP devices, IOS 12.1 and 12.2 on Cisco switches Wired EAP devices, and CatOS 6.x through 8.x on Cisco switches allows remote...

CVE-2007-5651

The CVE-2007-5651 entry affects Cisco EAP implementations: Cisco IOS 12.3/12.4 on Access Points and 1310 Wireless Bridges, IOS 12.1/12.2 on switches, and CatOS 6.x–8.x on Cisco switches. The vulnerability allows remote attackers to cause a denial of service (device reload) by sending a crafted EA...

openSUSE 10 Security Update : freeradius (freeradius-3286)

A memory leak in the code for handling EAP-TTLS tunnels could be exploited by attackers to crash freeradius CVE-2007-2028. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freeradius-3286. The...

Juniper SBR V 6.0.1 CRL-Checking problem

We tried to setup crl-checking on den sbr v 6.0.1 Steel Belted RADIUS. The URL socket is located on the RSA Authenticationsever V 6.7. Radius authentication via EAP TLS should not work because the SBR got a "CRL Fetch: HTTP socket connect failure from one of...

Fedora Core 6 : freeradius-1.1.3-2.fc6 (2007-499)

Wed May 9 2007 Thomas Woerner 1.1.3-2.fc6 - fixed CVE-2007-2028: EAP-TTLS denial of service Resolves: rhbz236248 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

security flaw

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

Moderate: freeradius security update

1.0.1-3.RHEL4.5 - fixed CVE-2007-2028: EAP-TTLS denial of service Resolves: rhbz236247...

GLSA-200704-14 : FreeRADIUS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200704-14 FreeRADIUS: Denial of Service The Coverity Scan project has discovered a memory leak within the handling of certain malformed Diameter format values inside an EAP-TTLS tunnel. Impact : A remote attacker could send a larg...

FreeBSD : freeradius -- EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability (c110eda2-e995-11db-a944-0012f06707f0)

The freeradius development team reports : A malicious 802.1x supplicant could send malformed Diameter format attributes inside of an EAP-TTLS tunnel. The server would reject the authentication request, but would leak one VALUEPAIR data structure, of approximately 300 bytes. If an attacker perform...

FreeRADIUS: Denial of service

Background FreeRADIUS is an open source RADIUS authentication server implementation. Description The Coverity Scan project has discovered a memory leak within the handling of certain malformed Diameter format values inside an EAP-TTLS tunnel. Impact A remote attacker could send a large amount of...

FreeRADIUS memory leak

Memory leak on large number of EAP-TLS requests leads to Denial of Service conditions...

CVE-2007-2028

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

CVE-2007-2028

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

CVE-2007-2028

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

Design/Logic Flaw

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

CVE-2007-2028

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

CVE-2007-2028

The CVE-2007-2028 entry concerns FreeRADIUS up to version 1.1.5 (and earlier) with a memory leak in EAP-TTLS tunnel handling. A remote attacker can send large numbers of authentication requests using malformed Diameter format attributes, causing the server to consume memory and potentially trigge...