CVE-2011-2701

The CVE-2011-2701 issue affects FreeRADIUS 2.1.11 where the OCSP check in rlm_eap_tls.c mishandles OCSP replies when OCSP is enabled, enabling a remote attacker to bypass authentication in EAP-TLS using a revoked X.509 client certificate. Public disclosures across advisories (Mandriva MDVSA-2012:...

CVE-2011-2701

The ocspcheck function in rlmeaptls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate...