CVE-2012-4566 in Uninett radsecproxy
Summary
The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients, a different vulnerability than CVE-2012-4523.
Reservation
08/21/2012
Disclosure
11/19/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62999 | Uninett radsecproxy Access Restriction access control | 264 | Not defined | Official fix | CVE-2012-4566 |