Re: FreeRADIUS vulnerabilities

2004-09-02 Thread phorced access
I got the cvs snapshot and found an issue with rlm_eap / there was a ./../../ typo in the attempt to create rlm_eap.o and also when it was made after removing the typo the make install didnt move it to the right directory. I had to move it and then the cvs worked. I had to remove the leading ./

Re: FreeRADIUS vulnerabilities

2004-09-01 Thread Alan DeKok
phorced access [EMAIL PROTECTED] wrote: On a packetstorm mirrior this weekend I saw a new RADIUS test package. Downloaded it and noticed there were scripts for exploiting vulnerabilities with FreeRADIUS. They're not exploits, so much as remote crashes. Has anyone looked into this package

Re: FreeRADIUS vulnerabilities

2004-09-01 Thread phorced access
Thank you for the response. It is sad that they did not try and contact you. When can we expect the new release? Thank you! On Wed, 01 Sep 2004 10:13:58 -0400, Alan DeKok [EMAIL PROTECTED] wrote: phorced access [EMAIL PROTECTED] wrote: On a packetstorm mirrior this weekend I saw a new

Re: FreeRADIUS vulnerabilities

2004-09-01 Thread Alan DeKok
phorced access [EMAIL PROTECTED] wrote: Thank you for the response. It is sad that they did not try and contact you. When can we expect the new release? We hope within a week or so. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRADIUS vulnerabilities

2004-08-31 Thread phorced access
On a packetstorm mirrior this weekend I saw a new RADIUS test package. Downloaded it and noticed there were scripts for exploiting vulnerabilities with FreeRADIUS. Has anyone looked into this package and what is the FreeRADIUS team doing to fix the issues with 1.0 as listed in the exploit.