« Volver al listado

CVE-2012-4566

Estado: ModificadaMedia (6.4)—

The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients, a different vulnerability than CVE-2012-4523.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Uninett — Radsecproxy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4566",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-11-20T00:55:01.260",
  "references": [
    {
      "url": "http://git.nordu.net/?p=radsecproxy.git%3Ba=commit%3Bh=3682c935facf5ccd7fa600644bbb76957155c680",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/51251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2573",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/17/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/31/6",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-10/msg00001.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://git.nordu.net/?p=radsecproxy.git%3Ba=commit%3Bh=3682c935facf5ccd7fa600644bbb76957155c680",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/51251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2573",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/17/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/10/31/6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://postlister.uninett.no/sympa/arc/radsecproxy/2012-10/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients, a different vulnerability than CVE-2012-4523."
    },
    {
      "lang": "es",
      "value": "El soporte DTLS en radsecproxy antes de v1.6.2 no verifica correctamente certificados cuando hay bloques de configuración con la configuración de CA que no están relacionados con el bloque que está siendo utilizado para comprobar la cadena de certificados, lo que podría permitir a atacantes remotos evitar las restricciones de acceso previstas y suplantar clientes, una vulnerabilidad diferente a CVE-2012-4523."
    }
  ],
  "lastModified": "2026-06-16T23:45:24.683",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7159418-645F-413E-89D2-EC6EA5544330",
              "versionEndIncluding": "1.6.1"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4CBC2D4-9F6A-45BE-B140-8352A3BC39DA"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C16B610A-1827-4C4E-828E-14E7941E8670"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:alpha-p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFAFCCC6-D0EE-4B7A-8DF2-315B36B1FF81"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.0:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC0A8D36-6EC2-419F-B3C8-6642FE16A8DA"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDA9FD53-D9FE-43BF-B387-4098770192A1"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "624FD1B7-C746-4C40-9690-0406298ABBD6"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.1:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE4446A8-E7FD-4138-9576-F96E7D9D6947"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ED032C3-4C5F-4F15-81BD-0C252F8C1CE0"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B2E1ACF-81C6-4829-9027-144E87CF78D9"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A216CB0E-C26B-4BDE-9EEE-0608CADB8D93"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6707C32A-F4ED-458C-A4FA-5AAAB3CD6725"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7610379-66F9-4F1F-B49E-36E8463CFE44"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5D6012D-16D2-46D3-B611-CE792B9C1194"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5B48A8-25E5-4628-B0B7-21DE24E2458D"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E63FF14F-C923-4375-98A6-C630F886562A"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D71552E9-B6A1-4772-8D91-5AD0BCD8BF9B"
            },
            {
              "criteria": "cpe:2.3:a:uninett:radsecproxy:1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0022B1B1-1D1C-49F9-BF02-745B1ED33398"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}