Cisco LEAP Password Disclosure Weakness

Bugtraq ID:	8755
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 03 2003 12:00AM
Updated:	Oct 03 2003 12:00AM
Credit:	The disclosure of this issue has been credited to the vendor.
Vulnerable:	Cisco LEAP
Not Vulnerable:

Cisco LEAP Password Disclosure Weakness

There are a number of publicly available tools to exploit this issue. The following proof-of-concepts were also released:

• /data/vulnerabilities/exploits/bfnthash.c
• /data/vulnerabilities/exploits/chaptest.c
• /data/vulnerabilities/exploits/clean.sh
• /data/vulnerabilities/exploits/compile.sh
• /data/vulnerabilities/exploits/des.h
• /data/vulnerabilities/exploits/deskey.c
• /data/vulnerabilities/exploits/desport.c
• /data/vulnerabilities/exploits/md4.c
• /data/vulnerabilities/exploits/md4.h
• /data/vulnerabilities/exploits/mschap.c
• /data/vulnerabilities/exploits/mschap.h
• /data/vulnerabilities/exploits/Notes

Cisco LEAP Password Disclosure Weakness

References:

• Dictionary Attack on Cisco LEAP (Cisco)
  
• WIRELESS LAN SECURITY SOLUTION (Cisco)
  
• Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable (Michael Renzmann )
  
• Re: Weaknesses in LEAP Challenge/Response (Sharad Ahlawat )