CVE Vulnerabilities

CVE-2006-1354

Published: Mar 22, 2006 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via Insufficient input validation in the EAP-MSCHAPv2 state machine module.

Affected Software

Name Vendor Start Version End Version
Freeradius Freeradius 1.0.0 (including) 1.0.0 (including)
Freeradius Freeradius 1.0.1 (including) 1.0.1 (including)
Freeradius Freeradius 1.0.2 (including) 1.0.2 (including)
Freeradius Freeradius 1.0.3 (including) 1.0.3 (including)
Freeradius Freeradius 1.0.4 (including) 1.0.4 (including)
Freeradius Freeradius 1.0.5 (including) 1.0.5 (including)
Freeradius Freeradius 1.1.0 (including) 1.1.0 (including)

References