CVE-2011-2701
- State
- Published
- Severity
- Not scored
- Published
- Aug 4, 2011
- Updated
- Aug 6, 2024
- Reserved
- Jul 11, 2011
Description
The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 48880vdb-entry
- freeradius-certificate-security-bypass(68782)vdb-entry
- [oss-security] 20110715 CVE request: vulnerability in FreeRADIUS (OCSP)mailing-list
- [oss-security] 20110718 Re: CVE request: vulnerability in FreeRADIUS (OCSP)mailing-list
- 45425third-party-advisory
- 20110725 [DSB-2011-01] Security Advisory FreeRADIUS 2.1.11mailing-list
- https://www.dfn-cert.de/informationen/Sicherheitsbulletins/dsb-2011-01.html
- 8325third-party-advisory
- 1025833vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=724815
- [oss-security] 20110720 Re: CVE request: vulnerability in FreeRADIUS (OCSP)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.