Apache mod_auth_radius remote integer overflow

LSS Security Advisory LSS-2005-01-02 http://security.lss.hr --- Title : Apache modauthradius remote integer overflow Advisory ID : LSS-2005-01-02 Date : 2005-01-10 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02 Impact : Denial of service attack Risk level : Low...

[VulnWatch] OpenBSD radius authentication vulnerability

Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...

CVE-2003-1001

Buffer overflow in the Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via HTTP auth requests for 1 TACACS+ or 2 RADIUS authentication...

Multiple Cisco FWSM bugs

SNMPv3 message causes device to reboot, buffer overflow on RADIUS and TACACS authentication...

Cisco RADIUS PAP-authentication cleartext password

In case of failed authentication password is sent in cleartext...

Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability

...

more RADIUS authentication attack scenarios

Hello bugtraq, There is also problem with some vendor-specific RADIUS authentication implementation. For example Microsoft has it's specific attributes defined in RFC 2548. These attributes allow MS-CHAP and MS-CHAPv2 authentication via RADIUS. There is design flow in this authentication scenario...

usrnetserver.txt

http://www.rootshell.com/ Date: Mon, 26 Oct 1998 18:51:09 +0000 From: Vesselin Mladenov Subject: USR Netserver 8/16 vulnarable to nestea attack Three days ago I found out that USR Netserver 8/16 V.34, running version 2.0.14 OS is vulnerable to nestea DoS attack for more info lookup in...