iodine/src
Erik Ekman 9e265625a1 Fix authentication bypass bug
The client could bypass the password check by continuing after getting error
from the server and guessing the network parameters. The server would still
accept the rest of the setup and also network traffic.

Add checks for normal and raw mode that user has authenticated before allowing
any other communication.

Problem found by Oscar Reparaz.

Backported to iodine 0.6 branch.
2014-06-17 18:59:06 +02:00
..
base32.c Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
base32.h Happy new year 2009-01-03 23:27:21 +00:00
base64.c Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
base64.h Happy new year 2009-01-03 23:27:21 +00:00
base128.c Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
base128.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
client.c #89, use remote ip as second ip in ifconfig on FreeBSD 2010-02-08 16:50:45 +00:00
client.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
common.c #76 start merging common and docs 2009-09-20 21:10:38 +00:00
common.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
dns.c Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
dns.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
encoding.c Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
encoding.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
fw_query.c Made dns_get_id return unsigned short, added test cases 2009-02-09 20:44:08 +00:00
fw_query.h Use winsock2.h, use ws2tcpip.h for socklen_t 2009-03-07 00:00:59 +00:00
iodine.c Update version to 0.6.0-rc1 2010-02-13 14:38:32 +00:00
iodined.c Fix authentication bypass bug 2014-06-17 18:59:06 +02:00
login.c Split the client code out from the file with the main() func 2009-08-16 12:30:26 +00:00
login.h Split the client code out from the file with the main() func 2009-08-16 12:30:26 +00:00
Makefile Fix osx compile, maybe also OpenBSD 2009-12-29 20:25:33 +00:00
md5.c separated md5 and login 2006-12-16 01:07:29 +00:00
md5.h separated md5 and login 2006-12-16 01:07:29 +00:00
osflags Add support for applying SELinux context 2009-06-24 17:28:13 +00:00
read.c #75, add txt read/write 2009-09-20 15:11:04 +00:00
read.h #75, add txt read/write 2009-09-20 15:11:04 +00:00
tun.c #89, use remote ip as second ip in ifconfig on FreeBSD 2010-02-08 16:50:45 +00:00
tun.h #89, use remote ip as second ip in ifconfig on FreeBSD 2010-02-08 16:50:45 +00:00
user.c Fix authentication bypass bug 2014-06-17 18:59:06 +02:00
user.h Fix authentication bypass bug 2014-06-17 18:59:06 +02:00
util.c #75, update client code 2009-09-20 15:11:14 +00:00
util.h Split the client code out from the file with the main() func 2009-08-16 12:30:26 +00:00
version.h Applied patch from #88, thanks a lot! 2009-12-29 20:00:57 +00:00
windows.h Fix compile for win32 2009-12-29 20:14:50 +00:00