alandekok/freeradius-server

alandekok/freeradius-server

Releases114
Frequency1 month 3 weeks
Last Release
Stars9
Alan DeKok's private copy of the FreeRADIUS Server code. Do NOT fork this. Use the link below instead.

CVE History

CVEPublishedCVSS v3CVSS v2
6 MEDIUM

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.