Lucene search
FreeBSD3EB0CCC2-8C6A-11E5-8519-005056AC623EHistoryNov 16, 2015 - 12:00 a.m.
strongswan -- authentication bypass vulnerability in the eap-mschapv2 plugin
2015-11-1600:00:00
vuxml.freebsd.org
14
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
Strongswan Release Notes reports:
Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin that
was caused by insufficient verification of the internal state when handling
MSCHAPv2 Success messages received by the client.
This vulnerability has been registered as CVE-2015-8023.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | strongswan | < 5.3.4 | UNKNOWN |
Related
nessus
nessus
SUSE SLED11 / SLES11 Security Update : strongswan (SUSE-SU-2015:2186-1)
2015-12-04 00:00:00
Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2811-1)
2015-11-17 00:00:00
openSUSE Security Update : strongswan (openSUSE-2015-810)
2015-11-30 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-345-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3398-1 (strongswan - security update)
2015-11-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:2183-1)
2021-04-19 00:00:00
prion
prion
Authentication flaw
2015-11-18 16:59:00
cvelist
cvelist
CVE-2015-8023
2015-11-18 16:00:00
ubuntucve
ubuntucve
CVE-2015-8023
2015-11-16 00:00:00
nvd
nvd
CVE-2015-8023
2015-11-18 16:59:07
suse
suse
Security update for strongswan (important)
2015-12-21 23:10:52
debian
debian
[SECURITY] [DSA 3398-1] strongswan security update
2015-11-16 13:14:07
[SECURITY] [DLA 345-1] strongswan security update
2015-11-19 12:46:30
cve
cve
CVE-2015-8023
2015-11-18 16:59:07
ibm
ibm
debiancve
debiancve
CVE-2015-8023
2015-11-18 16:59:07
ubuntu
ubuntu
strongSwan vulnerability
2015-11-16 00:00:00
osv
osv
strongswan-5.3.5-1.1 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
Related for 3EB0CCC2-8C6A-11E5-8519-005056AC623E