CVE-2006-1354

Published: Mar 22, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

Affected (7)

Products: Freeradius: Freeradius

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 1.0.0
Freeradius Freeradius	Version 1.0.1
Freeradius Freeradius	Version 1.0.2
Freeradius Freeradius	Version 1.0.3
Freeradius Freeradius	Version 1.0.4
Freeradius Freeradius	Version 1.0.5
Freeradius Freeradius	Version 1.1.0

References (38)

ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2006-0271.html

Source: cve@mitre.org

http://secunia.com/advisories/19300

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19405

Source: cve@mitre.org

http://secunia.com/advisories/19518

Source: cve@mitre.org

http://secunia.com/advisories/19527

Source: cve@mitre.org

http://secunia.com/advisories/19811

Source: cve@mitre.org

http://secunia.com/advisories/20461

Source: cve@mitre.org

http://securitytracker.com/id?1015795

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1089

Source: cve@mitre.org

http://www.freeradius.org/security.html

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:060

Source: cve@mitre.org

http://www.securityfocus.com/bid/17171

Source: cve@mitre.org

http://www.trustix.org/errata/2006/0020

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1016

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25352

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2006-0271.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19300

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19405

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19518

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19527

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19811

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20461

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015795

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1089

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.freeradius.org/security.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:060

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17171

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2006/0020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1016

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25352

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.