Lucene search
RedhatCVELIST:CVE-2011-2701HistoryAug 04, 2011 - 1:00 a.m.
CVE-2011-2701
2011-08-0401:00:00
redhat
www.cve.org
5
The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate.
References
secunia.com/advisories/45425
securityreason.com/securityalert/8325
securitytracker.com/id?1025833
www.openwall.com/lists/oss-security/2011/07/15/6
www.openwall.com/lists/oss-security/2011/07/18/2
www.openwall.com/lists/oss-security/2011/07/20/9
www.securityfocus.com/archive/1/518974/100/0/threaded
www.securityfocus.com/bid/48880
bugzilla.redhat.com/show_bug.cgi?id=724815
exchange.xforce.ibmcloud.com/vulnerabilities/68782
www.dfn-cert.de/informationen/Sicherheitsbulletins/dsb-2011-01.html
Related
nessus
nessus
Mandriva Linux Security Advisory : freeradius (MDVSA-2012:047)
2012-09-06 00:00:00
GLSA-201311-09 : FreeRADIUS: Multiple vulnerabilities
2013-11-13 00:00:00
securityvulns
securityvulns
FreeRADIUS OCSP vulnerability
2011-07-26 00:00:00
[DSB-2011-01] Security Advisory FreeRADIUS 2.1.11
2011-07-26 00:00:00
cve
cve
CVE-2011-2701
2011-08-04 02:45:32
ubuntucve
ubuntucve
CVE-2011-2701
2011-08-04 00:00:00
nvd
nvd
CVE-2011-2701
2011-08-04 02:45:32
prion
prion
Authentication flaw
2011-08-04 02:45:00
openvas
openvas
Mandriva Update for freeradius MDVSA-2012:047 (freeradius)
2012-08-03 00:00:00
Mandriva Update for freeradius MDVSA-2012:047 (freeradius)
2012-08-03 00:00:00
Gentoo Security Advisory GLSA 201311-09
2015-09-29 00:00:00
debiancve
debiancve
CVE-2011-2701
2011-08-04 02:45:32
gentoo
gentoo
FreeRADIUS: Multiple vulnerabilities
2013-11-13 00:00:00