Nicholas Bellinger 1d2b60a554
iscsi-target: Reject mutual authentication with reflected CHAP_C ...
This patch adds an explicit check in chap_server_compute_md5() to ensure
the CHAP_C value received from the initiator during mutual authentication
does not match the original CHAP_C provided by the target.
This is in line with RFC-3720, section 8.2.1:
Originators MUST NOT reuse the CHAP challenge sent by the Responder
for the other direction of a bidirectional authentication.
Responders MUST check for this condition and close the iSCSI TCP
connection if it occurs.
Reported-by: Tejas Vaykole <tejas.vaykole@calsoftinc.com >
Cc: stable@vger.kernel.org # 3.1+
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org >
2014-06-05 19:45:01 -07:00
2014-04-26 00:40:25 +02:00
2014-04-05 15:37:40 -07:00
2014-04-24 09:57:02 -07:00
2014-04-16 19:34:46 -07:00
2014-04-12 14:49:50 -07:00
2014-04-02 20:53:45 -07:00
2014-04-05 15:37:40 -07:00
2014-04-18 16:57:53 -07:00
2014-04-24 23:46:58 +02:00
2014-04-17 23:36:28 +02:00
2014-04-02 20:53:45 -07:00
2014-04-22 00:09:09 +02:00
2014-04-08 13:27:40 +02:00
2014-04-03 09:28:16 -07:00
2014-04-16 12:03:47 +05:30
2014-04-04 09:50:07 -07:00
2014-04-11 11:58:33 -07:00
2014-04-22 09:28:02 -07:00
2014-04-22 16:51:21 +02:00
2014-04-18 10:31:34 -07:00
2014-04-16 14:14:07 -07:00
2014-04-24 06:09:43 -07:00
2014-04-09 08:45:40 -07:00
2014-04-21 23:36:07 +02:00
2014-04-22 21:29:20 -07:00
2014-05-20 11:18:44 -07:00
2014-04-23 07:48:03 -07:00
2014-04-16 16:09:40 +02:00
2014-04-27 11:21:03 -07:00
2014-04-16 15:24:15 -04:00
2014-04-10 09:06:10 -07:00
2014-04-07 16:35:52 -07:00
2014-04-16 12:28:47 -07:00
2014-04-17 10:51:01 -07:00
2014-04-16 11:57:27 +05:30
2014-04-01 15:14:04 -07:00
2014-04-09 08:39:39 -07:00
2014-04-16 12:28:47 -07:00
2014-04-09 08:39:39 -07:00
2014-04-18 16:40:08 -07:00
2014-04-18 18:29:44 -04:00
2014-04-07 10:59:20 -07:00
2014-04-15 15:21:22 -05:00
2014-04-16 10:24:32 -06:00
2014-04-01 15:14:04 -07:00
2014-04-24 12:53:38 -07:00
2014-04-14 09:39:33 +02:00
2014-04-10 12:11:56 -04:00
2014-04-24 02:39:40 +02:00
2014-04-24 17:20:50 +01:00
2014-04-07 14:55:46 -07:00
2014-04-01 16:43:18 -04:00
2014-04-18 16:40:08 -07:00
2014-04-07 16:36:07 -07:00
2014-04-14 22:16:25 +01:00
2014-04-05 15:37:40 -07:00
2014-04-11 13:53:42 +02:00
2014-06-03 19:18:42 -07:00
2014-04-05 15:38:41 -07:00
2014-04-23 13:50:18 +01:00
2014-04-23 16:20:15 -07:00
2014-06-05 19:45:01 -07:00
2014-04-10 09:15:46 -07:00
2014-04-24 15:38:22 -07:00
2014-04-25 11:35:04 -07:00
2014-04-24 12:45:40 -07:00
2014-04-03 14:05:02 -07:00
2014-06-02 12:42:14 -07:00
2014-04-17 08:10:20 +03:00
2014-04-16 14:08:37 -07:00
2014-04-16 14:07:51 -07:00
2014-04-07 14:55:46 -07:00
2014-04-17 10:54:07 -07:00
2014-04-17 08:10:19 +03:00
1d2b60a554