CVE-2012-4523

{"id": "CVE-2012-4523", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-11-20T00:55:01.117", "references": [{"url": "http://secunia.com/advisories/51251", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2012/dsa-2573", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/10/17/7", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/10/31/6", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/56105", "source": "secalert@redhat.com"}, {"url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html", "source": "secalert@redhat.com"}, {"url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00006.html", "source": "secalert@redhat.com"}, {"url": "https://project.nordu.net/browse/RADSECPROXY-43", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients."}, {"lang": "es", "value": "radsecproxy antes de v1.6.1 no verifica correctamente certificados cuando hay bloques de configuraci\u00f3n con la configuraci\u00f3n de CA que no est\u00e1n relacionados con el bloque que est\u00e1 siendo utilizado para comprobar la cadena de certificados, lo que podr\u00eda permitir a atacantes remotos evitar las restricciones de acceso previstas y suplantar clientes."}], "lastModified": "2013-01-30T04:55:01.570", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:uninett:radsecproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E584E72B-9896-445A-A13B-7846418AB30C", "versionEndIncluding": "1.6"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4CBC2D4-9F6A-45BE-B140-8352A3BC39DA"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C16B610A-1827-4C4E-828E-14E7941E8670"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha-p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFAFCCC6-D0EE-4B7A-8DF2-315B36B1FF81"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC0A8D36-6EC2-419F-B3C8-6642FE16A8DA"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDA9FD53-D9FE-43BF-B387-4098770192A1"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "624FD1B7-C746-4C40-9690-0406298ABBD6"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE4446A8-E7FD-4138-9576-F96E7D9D6947"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ED032C3-4C5F-4F15-81BD-0C252F8C1CE0"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B2E1ACF-81C6-4829-9027-144E87CF78D9"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A216CB0E-C26B-4BDE-9EEE-0608CADB8D93"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6707C32A-F4ED-458C-A4FA-5AAAB3CD6725"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7610379-66F9-4F1F-B49E-36E8463CFE44"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5D6012D-16D2-46D3-B611-CE792B9C1194"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD5B48A8-25E5-4628-B0B7-21DE24E2458D"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E63FF14F-C923-4375-98A6-C630F886562A"}, {"criteria": "cpe:2.3:a:uninett:radsecproxy:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D71552E9-B6A1-4772-8D91-5AD0BCD8BF9B"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}