CVE-2012-4741 | BDVDB-2026-52047 Detail

Description#

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assignment extensions, which allows remote attackers to spoof user identities via the User-Name RADIUS attribute.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://sourceforge.net/mailarchive/message.php?msg_id=29126135
https://exchange.xforce.ibmcloud.com/vulnerabilities/78868
http://www.packetfence.org/bugs/view.php?id=1390

Exploit#

No public exploit known

History#

Version 12012-08-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.