can't believe Microsoft's RADIUS protocol is not vulnrable to this:eek: now that's a first:)

shunty

That's probable because they don't have a Radius product....otherwise I'm sure that they would be joining in :D

do I detect a touch of MS sarcasm there Jeff ? :D:D
I havn't used it myself yet in the real world.

(ooppss, should have been service not protocol, before someone corrects me;)

shunty

Not really....people with Microsoft products are some of my best customers....from a security perspective:):D

To be fair (god knows why) the issue appears to be widespread throughout most versions of Radius (except Cisco strangly enough).

Jeff

Cert have issued a bulletin regarding issues with a number of versions of RADIUS.

www.cert.org

If you run RADIUS to authenticate users then have a look at the bulletin.

If you don't know what RADIUS is then your probable not using it :)

Jeff

[Edited by Jeff Wiltshire - 3/5/2002 8:17:59 PM]