27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely

A long-standing vulnerability in OpenBSD’s networking stack has been disclosed, revealing that attackers can bypass PAP authentication entirely due to a decades-old logic flaw. The issue resides in the sppp_pap_input() function within OpenBSD’s sppp(4) subsystem, which manages synchronous PPP links used in PPPoE...

Read the full article at the source.