NVD

Id
60063  
Name
CVE-2006-1354  
Description
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-21  
Modified Date
2011-03-07  
Seq
2006-1354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
309177 60063 CVE-2006-1354 20060404-01-U  View
309178 60063 CVE-2006-1354 SUSE-SA:2006:019  View
309179 60063 CVE-2006-1354 oval:org.mitre.oval:def:10156  View
309180 60063 CVE-2006-1354 RHSA-2006:0271  View
309181 60063 CVE-2006-1354 1015795  View
309182 60063 CVE-2006-1354 DSA-1089  View
309183 60063 CVE-2006-1354 http://www.freeradius.org/security.html  View
309184 60063 CVE-2006-1354 GLSA-200604-03  View
309185 60063 CVE-2006-1354 MDKSA-2006:060  View
309186 60063 CVE-2006-1354 17171  View
309187 60063 CVE-2006-1354 2006-0020  View
309188 60063 CVE-2006-1354 ADV-2006-1016  View
309189 60063 CVE-2006-1354 freeradius-eap-mschapv2-auth-bypass(25352)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57946 JVNDB-2006-000142 FreeRADIUS の EAP-MSCHAPv2 モジュールにおける認証回避とサービス運用妨害 (Dos) の脆弱性 FreeRADIUS に実装される EAP-MSCHAPv2 モジュールには、入力値に対する妥当性の確認が不適切である脆弱性が存在します。 CVE-2006-1354 17456 CVE-2006-1354 60063 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000142.html 2006-03-21 2007-04-01 View