SEIL/B1 PPP Access Concentrator Authentication Bypass Vulnerability

Bugtraq ID:	37293
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2009 12:00AM
Updated:	Dec 14 2009 07:23PM
Credit:	The vendor
Vulnerable:	SEIL SEIL/B1 2.52 SEIL SEIL/B1 2.51 SEIL SEIL/B1 2.50 SEIL SEIL/B1 2.48
Not Vulnerable:	SEIL SEIL/B1 2.60

SEIL/B1 PPP Access Concentrator Authentication Bypass Vulnerability

SEIL/B1 is prone to an authentication-bypass vulnerability affecting CHAP and MS-CHAP-V2 authentication.

Successful exploits would allow an attacker to gain unauthorized access to network resources.

Versions prior to SEIL/B1 2.60 are vulnerable.

SEIL/B1 PPP Access Concentrator Authentication Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SEIL/B1 PPP Access Concentrator Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

SEIL/B1 PPP Access Concentrator Authentication Bypass Vulnerability

References:

• JVN#49602378 SEIL/B1 authentication issue (JP-CERT)
  
• Vendor Homepage (SEIL)
  
• SEIL/B1 in CHAP, MS-CHAP-V2 authentication vulnerability (SEIL)