Full Disclosure: Re: Cisco Security Advisory: RADIUS Authentication Bypass

[cstone <cstone () pobox com>]

On Wed, Jun 29, 2005 at 05:00:00PM +0200, Cisco Systems Product Security Incident Response Team wrote:

i would like to file a bug with this advisory (infinite loop):

[...]

> 4. Is there any other method between RADIUS and none?
> No: You are vulnerable.
> Yes: Go to step 5.
>
> 5. Is the other authentication method local?
> No: You are not vulnerable.
> Yes: Go to step 4.
[...]
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/