https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 01:44:19 +0000 https://vulnerability.circl.lu/vuln/cve-2015-8023 <p>The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.</p> <p>The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.</p> https://vulnerability.circl.lu/vuln/cve-2015-8023 https://vulnerability.circl.lu/vuln/usn-2811-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan</p> <p>It was discovered that the strongSwan eap-mschapv2 plugin incorrectly handled state. A remote attacker could use this issue to bypass authentication.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: strongswan</p> <p>It was discovered that the strongSwan eap-mschapv2 plugin incorrectly handled state. A remote attacker could use this issue to bypass authentication.</p> https://vulnerability.circl.lu/vuln/usn-2811-1