← Database

CVE-2004-2163

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.

Affected Platforms

Openbsd Openbsd

Weakness Type

NVD-CWE-Other

References