CVE-2004-2163

login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote…

published July 10, 2005

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01699 · 76.9th percentile
Published
2005-07-10T04:00Z
EPSS history
Timeline
  • 10 JUL 04:00Z
    login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote…
    cvelistv5