Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2006-1354
HistoryMar 22, 2006 - 12:00 a.m.

CVE-2006-1354

2006-03-2200:00:00
ubuntu.com
ubuntu.com
6

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.5%

JSON

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote
attackers to bypass authentication or cause a denial of service (server
crash) via “Insufficient input validation” in the EAP-MSCHAPv2 state
machine module.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfreeradius< 1.1.0-1ubuntu2.1UNKNOWN

Related

freebsd 2
nessus 8
openvas 10
nvd 1
prion 1
debiancve 1
cvelist 1
suse 1
cve 1
gentoo 1
centos 1
debian 1
redhat 1
osv 1
freebsd
freebsd
freeradius -- EAP-MSCHAPv2 Authentication Bypass
2006-03-21 00:00:00
freeradius -- authentication bypass vulnerability
2006-06-03 00:00:00
nessus
nessus
GLSA-200604-03 : FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module
2006-04-08 00:00:00
Mandrake Linux Security Advisory : freeradius (MDKSA-2006:060)
2006-03-27 00:00:00
FreeBSD : freeradius -- EAP-MSCHAPv2 Authentication Bypass (37a5c10f-bf56-11da-b0e9-00123ffe8333)
2006-05-13 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200604-03 (freeradius)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200604-03 (freeradius)
2008-09-24 00:00:00
FreeBSD Ports: freeradius
2008-09-04 00:00:00
nvd
nvd
CVE-2006-1354
2006-03-22 02:02:00
prion
prion
Input validation
2006-03-22 02:02:00
debiancve
debiancve
CVE-2006-1354
2006-03-22 02:02:00
cvelist
cvelist
CVE-2006-1354
2006-03-22 02:00:00
suse
suse
remote code execution in freeradius
2006-03-28 09:49:28
cve
cve
CVE-2006-1354
2006-03-22 02:02:00
gentoo
gentoo
FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module
2006-04-04 00:00:00
centos
centos
freeradius security update
2006-04-04 12:43:31
debian
debian
[SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution
2006-06-03 12:27:36
redhat
redhat
(RHSA-2006:0271) freeradius security update
2006-04-04 00:00:00
osv
osv
freeradius - several vulnerabilities
2006-06-03 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.5%

JSON
Related for UB:CVE-2006-1354
freebsd2nessus8openvas10nvd1prion1debiancve1cvelist1suse1cve1gentoo1centos1debian1redhat1osv1