NVD

Id
51532  
Name
CVE-2009-4409  
Description
The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-23  
Modified Date
2010-01-06  
Seq
2009-4409  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261303 51532 CVE-2009-4409 JVN#49602378  View
261304 51532 CVE-2009-4409 JVNDB-2009-000079  View
261305 51532 CVE-2009-4409 37293  View
261306 51532 CVE-2009-4409 http://www.seil.jp/seilseries/security/2009/a00697.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39993 JVNDB-2009-000079 SEIL/B1 の認証処理における脆弱性 SEIL/B1 には、PPP アクセスコンセントレータ (PPPAC) 機能の実装上の問題により、認証が適切に行われない可能性があります。 CVE-2009-4409 41840 CVE-2009-4409 51532 2.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000079.html 2009-12-09 2009-12-09 View