« Back to list

CVE-2012-4523

Status: ModifiedMedium (6.4)—

radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Uninett — Radsecproxy

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-4523",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-11-20T00:55:01.117",
  "references": [
    {
      "url": "http://secunia.com/advisories/51251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2573",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/17/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/31/6",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/56105",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00006.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://project.nordu.net/browse/RADSECPROXY-43",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/51251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2573",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/17/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/31/6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/56105",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00006.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://project.nordu.net/browse/RADSECPROXY-43",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients."
    },
    {
      "lang": "es",
      "value": "radsecproxy antes de v1.6.1 no verifica correctamente certificados cuando hay bloques de configuración con la configuración de CA que no están relacionados con el bloque que está siendo utilizado para comprobar la cadena de certificados, lo que podría permitir a atacantes remotos evitar las restricciones de acceso previstas y suplantar clientes."
    }
  ],
  "lastModified": "2026-06-16T23:45:15.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E584E72B-9896-445A-A13B-7846418AB30C",
              "versionEndIncluding": "1.6"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4CBC2D4-9F6A-45BE-B140-8352A3BC39DA"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C16B610A-1827-4C4E-828E-14E7941E8670"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha-p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFAFCCC6-D0EE-4B7A-8DF2-315B36B1FF81"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC0A8D36-6EC2-419F-B3C8-6642FE16A8DA"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDA9FD53-D9FE-43BF-B387-4098770192A1"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "624FD1B7-C746-4C40-9690-0406298ABBD6"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE4446A8-E7FD-4138-9576-F96E7D9D6947"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ED032C3-4C5F-4F15-81BD-0C252F8C1CE0"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B2E1ACF-81C6-4829-9027-144E87CF78D9"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A216CB0E-C26B-4BDE-9EEE-0608CADB8D93"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6707C32A-F4ED-458C-A4FA-5AAAB3CD6725"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7610379-66F9-4F1F-B49E-36E8463CFE44"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5D6012D-16D2-46D3-B611-CE792B9C1194"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5B48A8-25E5-4628-B0B7-21DE24E2458D"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E63FF14F-C923-4375-98A6-C630F886562A"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D71552E9-B6A1-4772-8D91-5AD0BCD8BF9B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}