oss-sec mailing list archives

Re: CVE request: vulnerability in FreeRADIUS (OCSP)

From: Ludwig Nussel <ludwig.nussel () suse de>
Date: Mon, 18 Jul 2011 14:56:06 +0200

dfncert () dfn-cert de wrote:

There is a vulnerability in the recently introduced OCSP feature in
FreeRADIUS version 2.1.11.

A patch was proposed to the packet maintainer.


Would you mind sharing that patch with us?

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)

Current thread:

CVE request: vulnerability in FreeRADIUS (OCSP) dfncert (Jul 15)
- Re: CVE request: vulnerability in FreeRADIUS (OCSP) Vincent Danen (Jul 15)
  - Re: CVE request: vulnerability in FreeRADIUS (OCSP) dfncert (Jul 18)
- Re: CVE request: vulnerability in FreeRADIUS (OCSP) Ludwig Nussel (Jul 18)
  - Re: CVE request: vulnerability in FreeRADIUS (OCSP) dfncert (Jul 18)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) Stefan Behte (Jul 18)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) Solar Designer (Jul 18)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) Tim Zingelman (Jul 18)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) Solar Designer (Jul 19)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) Tim Zingelman (Jul 19)
    - *BSD security contacts (was: CVE request: vulnerability in FreeRADIUS (OCSP)) Solar Designer (Jul 19)
    - Re: *BSD security contacts (was: CVE request: vulnerability in FreeRADIUS (OCSP)) Tim Zingelman (Jul 21)
    - Re: *BSD security contacts Solar Designer (Jul 21)
    - Re: CVE request: vulnerability in FreeRADIUS (OCSP) dfncert (Jul 19)

(Thread continues...)