← Database

CVE-2006-1354

HIGH CVSS: 7.5 Published: 2006-03-22 Modified: 2026-06-16

Description

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

Affected Platforms

Freeradius Freeradius

Weakness Type

NVD-CWE-Other

References