深澜安全认证网络管理计费系统(Srun 3000) /srun3/srun/services/modules/login/controller/login_controller.php任意文件下载漏

0x01 漏洞框架 Srun3000深澜校园宽带客户端是深澜软件面向校园网推出的安全认证网络管理计费产品。 /srun3/srun/services/modules/login/controller/logincontroller.php存在任意文件下载漏洞。 影响厂商：深澜软件 官方主页：http://www.srun.com/ 深澜软件的Srun 3000 安全认证网络管理计费产品家族由Srun 3000 Gateway System和 Srun 3000 Radius System组成。获得众多用户好评的Srun 3000 Gateway 认证计费系统在...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability (cisco-sa-20151005-ios-radius)

A vulnerability in the RADIUS client feature of Cisco IOS Software could allow an authenticated, remote attacker to cause a reload of the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

360 Radius - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application 360 Radius published at the 'play' market has multiple vulnerabilities...

Microsoft Network Policy Server RADIUS Denial of Service (MS16-021; CVE-2016-0050)

A denial-of-service vulnerability exists in Microsoft Network Policy Server. The vulnerability is due to improper handling of username strings in RADIUS authentication requests. A remote, unauthenticated attacker could exploit this vulnerability by sending maliciously crafted requests to the...

Dual Password Field wrongly shows in First Authentication Prompt when connecting to NetScaler Gateway using Receiver

Consider the following scenario, you are using LDAP + SMS passcode RADIUS authentication. The behavior is that user will first authenticate to LDAP, and then an SMS passcode is sent to their mobile device, which is used for authentication. Unless the user is authenticated to LDAP first, they will...

Microsoft Windows Server Network Policy Server Denial of Service Vulnerability

Microsoft Windows Server is a series of server operating systems released by the American company Microsoft. A denial of service vulnerability exists in the Network Policy Server NPS of Microsoft Windows Server, which arises from the program's failure to properly handle Remote Authentication...

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

Authentication flaw

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0050

CVE-2016-0050 denotes a DoS in Microsoft Network Policy Server (NPS) caused by misparsing/ improper handling of RADIUS username strings in authentication requests. A remote, unauthenticated attacker can exploit crafted username inputs to trigger a denial-of-service condition on NPS, affecting Win...

Microsoft Windows NPS RADIUS Server Denial of Service Vulnerability (3133043)

This host is missing an important security update according to Microsoft Bulletin MS16-021 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Network Policy Server RADIUS Implementation CVE-2016-0050 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause a denial of service condition. Technologies Affected Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

KLA10751 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability at...

Cumulative update for Windows 10 Version 1511: February 9, 2016

None None...

Cumulative update for Windows 10: February 9, 2016

None None...

MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

FreeRadius EAP-PWD module buffer overflow vulnerability (CNVD-2016-00367)

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius uses the 'strcpy' function to encapsulate C strings into EAP-PWD packets, allowing remote attackers to exploit vulnerabilities by submitting special requests ...

UBUNTU-CVE-2015-9542

addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy. An attacker could send a crafted password to an application loading the pamradius library and crash it. Arbitrary code...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20151119)

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request. CVE-2014-5355 A flaw was found in t...

[SECURITY] Fedora 22 Update: xsupplicant-2.2.0-13.fc22

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...