CVE-2012-4741 The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof use...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| packetfence | <= 3.2.0 | No fix listed |
References
- [Packetfence-announce] 20120413 PacketFence 3.3.0 released! mailing-list
- www.packetfence.org vendor-advisory
- packetfence-radius-spoofing(78868) vdb-entry