CVE-2011-2701

Publication date 4 August 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate.

Read the notes from the security team

Status

Package Ubuntu Release Status
freeradius 11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy Ignored end of life

Notes

mdeslaur

OCSP support was added in 2.1.11