CVE-2011-2701: Medium severity freeradius freeradius vulnerability
DFN-CERT reported [1] a vulnerability in the OCSP feature in FreeRADIUS 2.1.11 where it does not verify the status of a certificate (e.g. if the certificate was revoked).
No further details, or a patch, were provided. According to the changelog on the FreeRADIUS site [2], OCSP support was added in version 2.1.11:
OCSP support from Alex Bergmann. See raddb/eap.conf, "ocsp" section.
Therefore earlier versions of FreeRADIUS are not affected by this flaw.
[1] http://seclists.org/oss-sec/2011/q3/105 [2] http://freeradius.org/
Statement:
Not vulnerable. This issue did not affect the versions of freeradius as shipped with Red Hat Enterprise Linux 4, 5, or 6.
Other sources
The ocspcheck function in rlmeaptls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 client certificate.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2701?
CVE-2011-2701 is classified as having a moderate severity due to potential vulnerabilities in certificate status verification.
How do I fix CVE-2011-2701?
To remediate CVE-2011-2701, upgrade FreeRADIUS to version 2.1.12 or later.
Which versions of FreeRADIUS are affected by CVE-2011-2701?
FreeRADIUS versions 2.1.11 and earlier are affected by CVE-2011-2701.
What does CVE-2011-2701 impact?
CVE-2011-2701 impacts the OCSP feature in FreeRADIUS that does not verify the status of certificates.
Is there a known exploit for CVE-2011-2701?
There is currently no public information indicating a known exploit for CVE-2011-2701.