TekRADIUS SQL注入及不安全权限漏洞

CVECAN ID: CVE-2009-2357,CVE-2009-2358,CVE-2009-2359 TekRadius是一个免费的RADIUS服务器，可以支持RFC 2865和RFC 2866规范。 1 TekRADIUS的默认配置使用sa账号与Microsoft SQL Server通讯，远程攻击者可以相对较容易的获得对数据库的特权访问。 2 TekRADIUS将数据库凭据存储在了C:\Program Files\TekRADIUS\TekRADIUS.ini文件中。任何Windows本地用户都可以访问这个文件，读取加密了的凭据。 3...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

FreeBSD : L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump (96ba2dae-4ab0-11d8-96f2-0020ed76ef5a)

Jonathan Heusser discovered vulnerabilities in tcpdump's L2TP, ISAKMP, and RADIUS protocol handlers. These vulnerabilities may be used by an attacker to crash a running tcpdump' process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Cisco PIX/ASA Windows NT域绕过认证漏洞

BUGTRAQ ID: 31864 CVECAN ID: CVE-2008-3815 PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 由于Microsoft Windows NT域认证问题，Cisco ASA和Cisco PIX设备可能受VPN绕过认证漏洞的影响。配置了基于IPSec或SSL远程访问VPN的Cisco ASA或Cisco PIX安全设备存在这个漏洞，攻击者可以通过远程访问基于IPSec或SSL的VPN成功连接到Cisco ASA设备。 Cisco ASA或Cisco...

Gentoo Security Advisory GLSA 200612-17 (gnuradius)

The remote host is missing updates announced in advisory GLSA 200612-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200612-17 (gnuradius)

The remote host is missing updates announced in advisory GLSA 200612-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Secure ACS EAP Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Response: Cisco Secure ACS Denial Of Service Vulnerability http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml Revision 1.0 ============ For Public Release 2008 September 03 1600 UTC GMT Cisco Response ============== This...

Cisco Secure ACS Denial Of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Response: Cisco Secure ACS Denial Of Service Vulnerability http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml Revision 1.0 ============ For Public Release 2008 September 03 1600 UTC GMT Cisco Response ============== This...

Code injection

Cisco Secure ACS 3.x before 3.34 Build 12 patch 7, 4.0.x, 4.1.x before 4.14 Build 13 Patch 11, and 4.2.x before 4.20 Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users t...

FreeBSD Ports: gnu-radius

The remote host is missing an update to the system as announced in the referenced advisory. VID e6f0edd8-0b40-11d9-8a8a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gnu-radius

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Secure Access Control Server (ACS) Denial of Service Vulnerability

Cisco Secure Access Control Server ACS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling Remote Authentication Dial In User Service RADIUS Extensible Authentication...

IPS-1 Protection Updates for yardradius and Cisco IOS Vulnerabilities and IPS-1 Protocol and Protocol Subsystems Updates

A vulnerability in yardradius could allow a remote attacker to execute arbitrary code via a buffer overflow. A vulnerability in Cisco IOS 12.2T through 12.4 could allows remote attackers to bypass Authentication, Authorization, and Accounting AAA RADIUS authentication via a long username...

Cisco IP Phone 7921不安全PEAP实现漏洞

BUGTRAQ ID: 27935 Cisco 7921是一部无线的IP电话。 Cisco IP Phone 7921认证机制实现上存在漏洞，远程攻击者可能利用此漏洞获取口令相关的信息。 如果将Cisco 7921 IP电话配置为使用PEAP （MS-CHAPv2）的话，就不会验证服务器证书。如果恶意用户建立了恶意的接入点且RADIUS后端的签名数字证书声明与客户端使用相同证书的话，由于客户端不会检查签名，因此就会认为正在与可信任的服务器通讯，可能会向服务器发送哈希口令或PIN。 Cisco IP Phone 7921 厂商补丁： Cisco -----...

IEA Software (Multiple Products) - POST Denial of Service

IEA Software Multiple Products - POST Denial of Service source: https://www.securityfocus.com/bid/27701/info Multiple IEA Software products are prone to a denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the affected application, denying service to...

Design/Logic Flaw

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

CVE-2008-0330

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

CVE-2008-0330

Open System Consultants (OSC) Radiator before 4.0 is vulnerable to a remote denial-of-service through malformed RADIUS requests, as demonstrated by nmap. The affected software is OSC Radiator (pre-4.0). The underlying cause is a handling flaw in processing RADIUS messages that allows crafted pack...

CVE-2008-0330

Open System Consultants OSC Radiator before 4.0 allows remote attackers to cause a denial of service daemon crash via malformed RADIUS requests, as demonstrated by packets sent by nmap...

Debian Security Advisory DSA 659-1 (libpam-radius-auth)

The remote host is missing an update to libpam-radius-auth announced via advisory DSA 659-1. OpenVAS Vulnerability Test $Id: deb6591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 659-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...