radsecproxy Client Certificate Verification Security Bypass Vulnerability
BID:56105
Info
radsecproxy Client Certificate Verification Security Bypass Vulnerability
| Bugtraq ID: | 56105 |
| Class: | Design Error |
| CVE: |
CVE-2012-4523 CVE-2012-4566 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2012 12:00AM |
| Updated: | Nov 12 2012 05:30AM |
| Credit: | Ralf Paffrath |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
radsecproxy Client Certificate Verification Security Bypass Vulnerability
radsecproxy is prone to a security-bypass vulnerability.
Successful exploits will allow attackers to bypass certain security restrictions. This may aid in further attacks.
radsecproxy is prone to a security-bypass vulnerability.
Successful exploits will allow attackers to bypass certain security restrictions. This may aid in further attacks.
Exploit / POC
radsecproxy Client Certificate Verification Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
radsecproxy Client Certificate Verification Security Bypass Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
radsecproxy Client Certificate Verification Security Bypass Vulnerability
References:
References: