CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

AZL-44211 CVE-2015-3310 affecting package ppp for versions less than 2.5.0-1

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

Buffer overflow

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

Debian DSA-3228-1 : ppp - security update

Emanuele Rocca discovered that ppp, a daemon implementing the Point-to-Point Protocol, was subject to a buffer overflow when communicating with a RADIUS server. This would allow unauthenticated users to cause a denial-of-service by crashing the daemon. %NASLMINLEVEL 70300 C Tenable Network...

ppp buffer overflow

Buffer overflow on RADIUS server response parsing...

[SECURITY] [DSA 3228-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3228-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 16, 2015 http://www.debian.org/security/faq -...

CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

UBUNTU-CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

Mandriva Linux Security Advisory : ppp (MDVSA-2015:135)

Updated ppp packages fix security vulnerability : A vulnerability in ppp before 2.4.7 may enable an unprivileged attacker to access privileged options CVE-2014-3158. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2015-0607

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

CVE-2015-0598

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

Information disclosure

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

Authentication flaw

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

CVE-2015-0607

The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a...

CVE-2015-0598

The CVE-2015-0598 entry describes a denial-of-service in Cisco IOS/IOS XE due to the RADIUS implementation when processing crafted IPv6 Attributes in Access-Accept packets (Bug IDs CSCur84322 and CSCur27693). Affected products are Cisco IOS and IOS XE; the issue enables remote attackers to trigge...

CVE-2015-0607

The CVE-2015-0607 issue affects Cisco IOS Authentication Proxy by mishandling unsupported AAA return codes from RADIUS/TACACS+ servers, enabling a remote attacker to bypass authentication (e.g., with a blank password). The root cause is improper processing of invalid AAA codes by the Authenticati...

CVE-2015-0598

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

Unspecified Vulnerability in Cisco IOS Authentication Proxy Function

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Authentication Proxy feature of Cisco IOS, which stems from the program's failure to properly handle invalid Authentication, Authorization, and Accounting AAA return codes originati...