Juniper Steal-Belted Radius Certificate Revocation Authentication Bypass Vulnerability

Bugtraq ID:	24679
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 27 2007 12:00AM
Updated:	Jun 28 2007 10:38PM
Credit:	Udo Sprotte is credited with the discovery of this vulnerability.
Vulnerable:	Juniper Steal-Belted Radius 6.0.1
Not Vulnerable:

Juniper Steal-Belted Radius Certificate Revocation Authentication Bypass Vulnerability

Juniper Steal-Belted Radius (SBR) is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized access to affected networks. This could lead to other attacks.

This issue affects Juniper SBR 6.0.1; other versions may also be affected.

Juniper Steal-Belted Radius Certificate Revocation Authentication Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Juniper Steal-Belted Radius Certificate Revocation Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Juniper Steal-Belted Radius Certificate Revocation Authentication Bypass Vulnerability

References:

• Juniper Steal-Belted Radius Home Page (Juniper Networks)
  
• Juniper SBR V 6.0.1 CRL-Checking problem ([email protected])