OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brian Somers (briancvs.openbsd.org)
Date: Sun Apr 01 2001 - 17:41:24 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    CVSROOT: /cvs
    Module name: src
    Changes by: briancvs.openbsd.org 2001/04/01 16:41:24

    Modified files:
            usr.sbin/ppp/ppp: chap.c pap.c radius.c radius.h

    Log message:
    Don't assume challenges and responses don't contain embedded '\0's.

    Mschapv2 response generation may produce embedded NULs... causing
    us to send a bogus response to the radius server and end up
    failing the client's valid response.

    Problem pointed out by: Eugene Vigovskiy <vigovcom2com.ru>