27-Year-Old OpenBSD Vulnerability Exposed: Remote Auth Bypass Disclosed

A vulnerability in OpenBSD's networking stack has been disclosed, allowing attackers to bypass PAP authentication due to a logic flaw in the sppp_pap_input() function. This flaw, present since the import from FreeBSD in July 1999, enables attackers to intercept and read PPPoE traffic without credentials. The vulnerability affects systems relying on the Password Authentication Protocol (PAP) during the authentication phase. OpenBSD has released a patch to address this issue. The vulnerability has persisted through nearly three decades of system updates. Argus-Systems discovered the flaw, which is now classified as a critical security risk. Users of OpenBSD are urged to apply the patch immediately to mitigate potential exploitation.

Key Points: • A critical vulnerability in OpenBSD's PAP authentication has existed for 27 years. • Attackers can bypass authentication and intercept PPPoE traffic without credentials. • OpenBSD has released a patch to address the vulnerability, urging immediate application.