eapmd5pass 'extract_eapusername' function denial of service vulnerability

eapmd5pass is a penetration testing tool for attacks against the EAP-MD5 protocol. A security vulnerability exists in the 'extracteapusername' function in eapmd5pass version 1.4. A remote attacker can exploit this vulnerability by generating specially crafted network traffic to cause the eapmd5pa...

PT-2017-12163

Name of the Vulnerable Software and Affected Versions eapmd5pass version 1.4 Description A length validation flaw was found in the way eapmd5pass handled network traffic in the extract eapusername function, potentially leading to out-of-bounds read and write. This could allow a remote attacker to...