Cisco IP Phone 7921不安全PEAP实现漏洞

BUGTRAQ ID: 27935 Cisco 7921是一部无线的IP电话。 Cisco IP Phone 7921认证机制实现上存在漏洞，远程攻击者可能利用此漏洞获取口令相关的信息。 如果将Cisco 7921 IP电话配置为使用PEAP （MS-CHAPv2）的话，就不会验证服务器证书。如果恶意用户建立了恶意的接入点且RADIUS后端的签名数字证书声明与客户端使用相同证书的话，由于客户端不会检查签名，因此就会认为正在与可信任的服务器通讯，可能会向服务器发送哈希口令或PIN。 Cisco IP Phone 7921 厂商补丁： Cisco -----...

IEA Software (Multiple Products) - POST Denial of Service

IEA Software Multiple Products - POST Denial of Service source: https://www.securityfocus.com/bid/27701/info Multiple IEA Software products are prone to a denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the affected application, denying service to...

CVE-2008-0330

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

Design/Logic Flaw

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

CVE-2008-0330

Open System Consultants (OSC) Radiator before 4.0 is vulnerable to a remote denial-of-service through malformed RADIUS requests, as demonstrated by nmap. The affected software is OSC Radiator (pre-4.0). The underlying cause is a handling flaw in processing RADIUS messages that allows crafted pack...

CVE-2008-0330

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

Debian Security Advisory DSA 598-1 (yardradius)

The remote host is missing an update to yardradius announced via advisory DSA 598-1. OpenVAS Vulnerability Test $Id: deb5981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 598-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1245-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1245-1. Martin Loewer discovered that the proftpd FTP daemon is vulnerable to denial of service if the addon module for Radius authentication is enabled. OpenVAS Vulnerability Test $Id: deb12451.nasl 6616 2017-07-07...

Debian Security Advisory DSA 659-1 (libpam-radius-auth)

The remote host is missing an update to libpam-radius-auth announced via advisory DSA 659-1. OpenVAS Vulnerability Test $Id: deb6591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 659-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0330: Improper Authentication

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

Debian: Security Advisory (DSA-1245-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-659-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 261-1 (tcpdump)

The remote host is missing an update to tcpdump announced via advisory DSA 261-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1089-1 (freeradius)

The remote host is missing an update to freeradius announced via advisory DSA 1089-1. Several problems have been discovered in freeradius, a high-performance and highly configurable RADIUS server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4744 Su...

Debian: Security Advisory (DSA-1089-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heimdal RADIUS server memory corruption

free of uninitialized pointer on invalid user name...

Juniper SBR V 6.0.1 CRL-Checking problem

We tried to setup crl-checking on den sbr v 6.0.1 Steel Belted RADIUS. The URL socket is located on the RSA Authenticationsever V 6.7. Radius authentication via EAP TLS should not work because the SBR got a "CRL Fetch: HTTP socket connect failure from one of...

Juniper Steel Belted RADIUS CRL access problem

Certificates revocation list download ffeature doesn't work...

Debian DSA-1245-1 : proftpd - programming error

Martin Loewer discovered that the proftpd FTP daemon is vulnerable to denial of service if the addon module for Radius authentication is enabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

[SECURITY] Fedora Core 6 Update: freeradius-1.1.3-2.fc6

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...