CVE-2024-3596

CRITICAL

FreeRADIUS < 3.0.27 - RADIUS Response Forgery via MD5 Chosen-Prefix Collision

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-3596. PoCs published by alperenugurlu.

AI-analyzed exploit summary This repository contains a Python script that detects CVE-2024-3596 by analyzing RADIUS/UDP traffic for MD5 collisions. It captures Access-Request packets and checks for vulnerabilities but does not exploit them.

Description

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Exploits (1)

nomisec SCANNER 7 stars

by alperenugurlu · poc

https://github.com/alperenugurlu/CVE-2024-3596-Detector

View Code ZIP pw:eip

This repository contains a Python script that detects CVE-2024-3596 by analyzing RADIUS/UDP traffic for MD5 collisions. It captures Access-Request packets and checks for vulnerabilities but does not exploit them.

Classification

Scanner 90%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: RADIUS protocol implementations

Auth required

Prerequisites: Shared secret · Network interface access · RADIUS dictionary file

MITRE ATT&CK