PT-2011-4033

Name of the Vulnerable Software and Affected Versions FreeRADIUS version 2.1.11 Description The issue concerns the ocsp check function in rlm eap tls.c, which does not properly parse replies from OCSP responders when OCSP is enabled. This allows remote attackers to bypass authentication by using...