Lucene search
Ubuntu.comUB:CVE-2012-4523HistoryNov 20, 2012 - 12:00 a.m.
CVE-2012-4523
2012-11-2000:00:00
ubuntu.com
ubuntu.com
4
0.005 Low
EPSS
Percentile
77.4%
radsecproxy before 1.6.1 does not properly verify certificates when there
are configuration blocks with CA settings that are unrelated to the block
being used for verifying the certificate chain, which might allow remote
attackers to bypass intended access restrictions and spoof clients.
Notes
| Author | Note |
|---|---|
| seth-arnold | version and cve were updated after 1.6.1 release, grab those too |
References
Related
prion
prion
Design/Logic Flaw
2012-11-20 00:55:00
Design/Logic Flaw
2012-11-20 00:55:00
debiancve
debiancve
CVE-2012-4523
2012-11-20 00:55:00
CVE-2012-4566
2012-11-20 00:55:00
cve
cve
CVE-2012-4523
2012-11-20 00:55:00
CVE-2012-4566
2012-11-20 00:55:00
cvelist
cvelist
CVE-2012-4523
2012-11-20 00:00:00
CVE-2012-4566
2022-10-03 16:15:32
osv
osv
radsecproxy - SSL certificate verification weakness
2012-11-10 00:00:00
openvas
openvas
Debian Security Advisory DSA 2573-1 (radsecproxy)
2012-11-16 00:00:00
Debian: Security Advisory (DSA-2573-1)
2012-11-16 00:00:00
securityvulns
securityvulns
radsecproxy protection bypass
2012-11-13 00:00:00
[SECURITY] [DSA 2573-1] radsecproxy security update
2012-11-13 00:00:00
nessus
nessus
Debian DSA-2573-1 : radsecproxy - SSL certificate verification weakness
2012-11-12 00:00:00
debian
debian
[SECURITY] [DSA 2573-1] radsecproxy security update
2012-11-10 21:51:53
ubuntucve
ubuntucve
CVE-2012-4566
2012-11-20 00:00:00