Cisco Context Directory Agent Replayed RADIUS Accounting Message Vulnerability

A vulnerability in RADIUS message processing of Cisco Context Directory Agent CDA could allow an unauthenticated, remote attacker to affect the contents of the CDA cache. The vulnerability is due to insufficient validation of RADIUS accounting messages. An attacker could exploit this vulnerabilit...

CVE-2014-0655

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

Design/Logic Flaw

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

CVE-2014-0654

The Cisco Context Directory Agent (CDA) is affected by CVE-2014-0654 due to insufficient validation of RADIUS accounting messages. A remote, unauthenticated attacker can replay crafted messages to modify the CDA cache. The vulnerability could affect the contents of the CDA cache; Cisco notes that...

CVE-2014-0655

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

CVE-2014-0655

Cisco ASA with Identity Firewall (IDFW) is affected by CVE-2014-0655 due to insufficient validation of RADIUS Change of Authorization (CoA) messages, allowing unauthenticated remote attackers to replay crafted CoA messages and modify the IDFW user cache. This is tied to Bug CSCuj45332. The vulner...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

Cisco Adaptive Security Appliance RADIUS Change of Authorization Message Replay Vulnerability

A vulnerability in RADIUS Change of Authorization CoA messages of the Identity Firewall IDFW feature of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the contents of the IDFW user cache. The vulnerability is due to insufficient validation of...

PT-2014-3750

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software affected versions not specified Description The issue concerns the Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software. It allows remote attackers to modify the...

CVE-2014-0655: Improper Input Validation

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

PT-2014-3749

Name of the Vulnerable Software and Affected Versions Cisco Context Directory Agent CDA affected versions not specified Description The issue allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages. Recommendations At the moment, there is no...

CVE-2014-0654: Improper Input Validation

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

CVE-2013-5143

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate...

Design/Logic Flaw

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate...

CVE-2013-5143

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate...

CVE-2013-5143

The CVE-2013-5143 issue affects Apple OS X Server’s RADIUS service (Server App) prior to version 3.0. The root cause is the service selecting a fallback X.509 certificate under unspecified conditions, which could enable a man-in-the-middle attack to hijack RADIUS sessions by an attacker who knows...

PT-2013-5389

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 3.0 Description The issue concerns the RADIUS service in Server App, where it selects a fallback X.509 certificate under certain circumstances. This could potentially allow man-in-the-middle attackers to...

CVE-2013-5143: Undefined Security Weakness

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate...

CVE-2013-4708

The PPP Access Concentrator PPPAC in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows...