Vulnerabilities > CVE-2004-2163 - Unspecified vulnerability in Openbsd 3.2/3.4/3.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
openbsd
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.

Vulnerable Configurations

Part Description Count
OS
Openbsd
3

References