Test ID:	1.3.6.1.4.1.25623.1.0.56557
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200604-03 (freeradius)
Summary:	The remote host is missing updates announced in;advisory GLSA 200604-03.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200604-03. Vulnerability Insight: The EAP-MSCHAPv2 module of FreeRADIUS is affected by a validation issue which causes some authentication checks to be bypassed. Solution: All FreeRADIUS users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-dialup/freeradius-1.1.1' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1354 BugTraq ID: 17171 http://www.securityfocus.com/bid/17171 Debian Security Information: DSA-1089 (Google Search) http://www.debian.org/security/2006/dsa-1089 http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156 RedHat Security Advisories: RHSA-2006:0271 http://rhn.redhat.com/errata/RHSA-2006-0271.html http://securitytracker.com/id?1015795 http://secunia.com/advisories/19300 http://secunia.com/advisories/19405 http://secunia.com/advisories/19518 http://secunia.com/advisories/19527 http://secunia.com/advisories/19811 http://secunia.com/advisories/20461 SGI Security Advisory: 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc SuSE Security Announcement: SUSE-SA:2006:019 (Google Search) http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html http://www.trustix.org/errata/2006/0020 http://www.vupen.com/english/advisories/2006/1016 XForce ISS Database: freeradius-eap-mschapv2-auth-bypass(25352) https://exchange.xforce.ibmcloud.com/vulnerabilities/25352
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.