CVE-2009-4409

The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack.

CVSS v2.0 2.6 LOW

2.6^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://jvn.jp/en/jp/JVN49602378/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000079.html
http://secunia.com/advisories/37628	Vendor Advisory
http://www.osvdb.org/61118
http://www.securityfocus.com/bid/37293
http://www.seil.jp/seilseries/security/2009/a00697.php	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:iij:seil\/b1:1.00:::::::*
	cpe:2.3:h:iij:seil\/b1:2.01:::::::*
	cpe:2.3:h:iij:seil\/b1:2.10:::::::*
	cpe:2.3:h:iij:seil\/b1:2.20:::::::*
	cpe:2.3:h:iij:seil\/b1:2.30:::::::*
	cpe:2.3:h:iij:seil\/b1:2.40:::::::*
	cpe:2.3:h:iij:seil\/b1:2.41:::::::*
	cpe:2.3:h:iij:seil\/b1:2.42:::::::*
	cpe:2.3:h:iij:seil\/b1:2.50:::::::*
	cpe:2.3:h:iij:seil\/b1:2.51:::::::*
	cpe:2.3:h:iij:seil\/b1:2.52:::::::*

History

No history.

Information

Published : 2009-12-23 21:30

Updated : 2023-12-10 11:03

NVD link : CVE-2009-4409

Mitre link : CVE-2009-4409

CVE.ORG link : CVE-2009-4409

JSON object : View

Products Affected

iij

seil\/b1

CWE

CWE-287

Improper Authentication

{"id": "CVE-2009-4409", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-12-23T21:30:00.313", "references": [{"url": "http://jvn.jp/en/jp/JVN49602378/index.html", "source": "cve@mitre.org"}, {"url": "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000079.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/37628", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/61118", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/37293", "source": "cve@mitre.org"}, {"url": "http://www.seil.jp/seilseries/security/2009/a00697.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack."}, {"lang": "es", "value": "La autenticaci\u00f3n (1) CHAP y (2) MS-CHAP-V2 en la funci\u00f3n PPP Access Concentrator (PPPAC) en el firmware Internet Initiative Japan SEIL/B1 v1.00 hasta v2.52 utiliza el mismo desaf\u00edo para cada intento de autenticaci\u00f3n, permitiendo a atacantes remotos saltar la autenticaci\u00f3n mediante un ataque de repetici\u00f3n."}], "lastModified": "2010-01-06T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:iij:seil\\/b1:1.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AB18B1D-6DB6-4096-83EC-9608678218DE"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F9B7A67-49CD-4D42-B5C5-E45BE775EDB5"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB22791F-D919-4B32-86E7-83ACBE6D4F03"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D36BD6C-7802-473A-B8A1-BD4D687F3AEC"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8617348-4572-4277-AFB4-241F4A38687F"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D73D5590-F721-4A8C-95D8-B396198FB27D"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6382F122-161C-433D-AF82-0E8E4073A392"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4772B30-D3E3-49AC-86F7-CEAE59CECE02"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "477AEE25-5F49-4DCA-95C3-61DF83E4E91D"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "558625E8-5613-4993-84DF-C0ECF0C92325"}, {"criteria": "cpe:2.3:h:iij:seil\\/b1:2.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D4BB407-DECF-4E84-BF99-9CE2A93A84A7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}