CVE-2021-31378

In broadband environments, including but not limited to Enhanced Subscriber Management, CHAP, PPP, DHCP, etc., on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be...

The vulnerability of the general proxy server RADIUS software Radsecproxy, related to insufficient input data validation, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the general proxy server RADIUS software Radsecproxy is related to the lack of input validation in the scripts “naptr-eduroam.sh” and “radsec-dynsrv.sh”. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cau...

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

Information disclosure

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

CVE-2021-36309

Summary of CVE-2021-36309 : Dell Enterprise SONiC OS (Dell Enterprise SONiC OS) versions 3.3.0 and earlier are affected by an information-disclosure vulnerability. An authenticated attacker with system access can read sensitive information by abusing stored TACACS/RADIUS credentials. The impact i...

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

Dell Enterprise Sonic Os 信息泄露漏洞

Dell Enterprise Sonic Os Dell Enterprise Sonic OS is an open source network operating system from Dell Dell. An information disclosure vulnerability exists in Dell Enterprise SONiC OS 3.3.0 and earlier versions, which can be exploited by an authenticated, malicious user to gain access to the syst...

MGASA-2021-0434 Updated proftpd packages fix security vulnerability

Fixes memory disclosure to RADIUS servers by modradius. Ftp clients like filezilla fail to detect locale with in log : "Status: Server does not support non-ASCII characters." This comes from proftpd MultilineRFC2228 directive enabled by default. Without this directive Filezilla is able to enable...

Updated proftpd packages fix security vulnerability

Fixes memory disclosure to RADIUS servers by modradius. Ftp clients like filezilla fail to detect locale with in log : "Status: Server does not support non-ASCII characters." This comes from proftpd MultilineRFC2228 directive enabled by default. Without this directive Filezilla is able to enable...

Vulnerability of the dhcpattr2vp() function in the RADIUS-server FreeRADIUS, allowing a intruder to cause a service failure

The vulnerability of the dhcpattr2vp function in the RADIUS-server FreeRADIUS is related to an infinite loop. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Cisco Patches Critical Bug With Public Exploit

Cisco has patched a near-max critical bug in its NFVIS software for which there’s a publicly available proof-of-concept PoC exploit. On Wednesday, Cisco released patches for the flaw – an authentication bypass vulnerability in Enterprise NFV Infrastructure Software NFVIS that’s tracked as...

Critical Juniper Bug Allows DoS, RCE Against Carrier Networks

A critical remote code-execution vulnerability in Juniper Networks’ Steel-Belted Radius SBR Carrier Edition lays open wireless carrier and fixed operator networks to tampering. The SBR Carrier server is used by telecom carriers to manage policies for how subscribers access their networks – by...

How to modify the ADC Radius Request retry attempts .

This article describes how to modify the number of attempts by ADC to send a Radius Request to Radius Server...

CVE-2021-0276

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

CVE-2021-0276 Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

Juniper Networks SBR Carrier 缓冲区错误漏洞

Juniper Networks SBR Carrier is a set of AAA Authentication, Authorization and Accounting servers for carriers from Juniper Networks. The product provides network resource management, user access control, and billing. A security vulnerability exists in Juniper Networks SBR Carrier that originated...

CVE-2021-0276

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

OPENSUSE-SU-2021:1896-1 Security update for pam_radius

This update for pamradius fixes the following issues: - CVE-2015-9542: pamradius: buffer overflow in password field bsc1163933...

CVE-2021-24389

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakeryradius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability...

CVE-2021-24389

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakeryradius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting XSS vulnerability...