Test Kennung:	1.3.6.1.4.1.25623.1.0.882745
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for freeradius CESA-2017:1581 centos7
Zusammenfassung:	Check the version of freeradius
Beschreibung:	Summary: Check the version of freeradius Vulnerability Insight: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148) Affected Software/OS: freeradius on CentOS 7 Solution: Please Install the Updated Packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9148 BugTraq ID: 98734 http://www.securityfocus.com/bid/98734 https://security.gentoo.org/glsa/201706-27 http://freeradius.org/security.html http://seclists.org/oss-sec/2017/q2/422 RedHat Security Advisories: RHSA-2017:1581 https://access.redhat.com/errata/RHSA-2017:1581 http://www.securitytracker.com/id/1038576
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.