OpenBSD Radius Authentication Bypass Vulnerability
BID:11227
Info
OpenBSD Radius Authentication Bypass Vulnerability
| Bugtraq ID: | 11227 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 21 2004 12:00AM |
| Updated: | Sep 21 2004 12:00AM |
| Credit: | This issue was disclosed by Eilko Bos. |
| Vulnerable: |
OpenBSD OpenBSD 3.5 OpenBSD OpenBSD 3.4 OpenBSD OpenBSD 3.2 F5 BIG-IP 4.6.2 F5 BIG-IP 4.6 F5 BIG-IP 4.5.10 F5 BIG-IP 4.5.9 F5 BIG-IP 4.5.6 F5 BIG-IP 4.5 F5 BIG-IP 4.4 F5 BIG-IP 4.3 F5 BIG-IP 4.2 F5 3-DNS 4.6.2 F5 3-DNS 4.6 F5 3-DNS 4.5 F5 3-DNS 4.4 F5 3-DNS 4.3 F5 3-DNS 4.2 |
| Not Vulnerable: |
F5 BIG-IP 4.6.3 F5 BIG-IP 4.5.11 F5 3-DNS 4.6.3 F5 3-DNS 4.5.11 |
Discussion
OpenBSD Radius Authentication Bypass Vulnerability
OpenBSD is reported prone to an authentication bypass vulnerability when using Radius authentication. This issue can be leveraged by spoofing traffic on a vulnerable network and carrying out a man-in-the-middle attack to gain unauthorized access to an OpenBSD computer.
This vulnerability arises if an OpenBSD computer is configured to use Radius authentication and may allow an attacker to gain unauthorized access to the OpenBSD computer.
The vulnerability is confirmed in OpenBSD 3.2 and OpenBSD 3.5. Other versions may be vulnerable as well.
OpenBSD is reported prone to an authentication bypass vulnerability when using Radius authentication. This issue can be leveraged by spoofing traffic on a vulnerable network and carrying out a man-in-the-middle attack to gain unauthorized access to an OpenBSD computer.
This vulnerability arises if an OpenBSD computer is configured to use Radius authentication and may allow an attacker to gain unauthorized access to the OpenBSD computer.
The vulnerability is confirmed in OpenBSD 3.2 and OpenBSD 3.5. Other versions may be vulnerable as well.
Exploit / POC
OpenBSD Radius Authentication Bypass Vulnerability
An exploit is not required to leverage this issue.
An exploit is not required to leverage this issue.
Solution / Fix
OpenBSD Radius Authentication Bypass Vulnerability
Solution:
Patches are available for OpenBSD 3.4 and 3.5. It is also reported that this issue is addressed in OpenBSD 3.6 and OpenBSD-current.
F5 has released a patch and upgrades for BIG-IP and 3-DNS. Version 4.5.11 and 4.6.3 are not vulnerable to this issue. Contact the vendor to obtain fixes or upgrades.
OpenBSD OpenBSD 3.5
OpenBSD OpenBSD 3.4
Solution:
Patches are available for OpenBSD 3.4 and 3.5. It is also reported that this issue is addressed in OpenBSD 3.6 and OpenBSD-current.
F5 has released a patch and upgrades for BIG-IP and 3-DNS. Version 4.5.11 and 4.6.3 are not vulnerable to this issue. Contact the vendor to obtain fixes or upgrades.
OpenBSD OpenBSD 3.5
-
OpenBSD 020_radius.patch
ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/3.5/common/020_radius.patch
OpenBSD OpenBSD 3.4
-
OpenBSD 031_radius.patch
ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/3.4/common/031_radius.patch
References
OpenBSD Radius Authentication Bypass Vulnerability
References:
References:
- BigIP Product Information (F5 Software)
- OpenBSD Homepage (OpenBSD)
- OpenBSD radius authentication vulnerability (Eilko Bos)