CVE-2012-4741

CVE-2012-4741 affects the RADIUS extension in PacketFence prior to v3.3.0. The authentication username differs from the one used for authentication for users with custom VLAN assignment extensions, allowing remote attackers to spoof user identities via the User-Name RADIUS attribute. Impact is li...

CVE-2012-4742

The webnoderegister function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4740

CVE-2012-4740 describes a cross-site scripting (XSS) vulnerability in the PacketFence captive portal, affecting versions before 3.3.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available documents do not provide exploit details, ...

CVE-2012-4741

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute...

CVE-2012-4740

Cross-site scripting XSS vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4742: Undefined Security Weakness

The webnoderegister function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-4740: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4741: Improper Authentication

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute...

PacketFence 3.2.0 released

PacketFence 3.2.0 released The PacketFence development team has published version 3.2.0 of its open source network access control NAC system. PacketFence allows organisations to increase control over their network by enforcing authentication and registration for newly connected devices. It also...

Network access control system PacketFence 2.2 released !

PacketFence is a free and open source network access control NAC system. It can be used to effectively secure networks - from small to very large heterogeneous networks. PacketFence has been deployed in production environments where thousands of users are involved - on wired and wireless networks...

PacketFence Network Access Controller Cross Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

PacketFence Network Access Controller - Cross-Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

PacketFence Network Access Controller XSS vulnerability

No description provided by source. Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network...

PacketFence Network Access Controller XSS vulnerability

Exploit for unknown platform in category web applications ======================================================= PacketFence Network Access Controller XSS vulnerability ======================================================= Title : Injection Flaw in PacketFence Network Access Controller Date :...

PacketFence Network Access Controller - Cross-Site Scripting

PacketFence Network Access Controller - Cross-Site Scripting Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Fr...