PT-2005-5586 · Freeradius+1 · Freeradius+1

Publicado 1970-01-01 · Atualizado 2010-04-02 · CVE-2005-4745

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 1.0.3 through 1.0.4

Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to disruption of protected information. This can be exploited remotely. Multiple vulnerabilities in various FreeRADIUS packages for Debian GNU/Linux may also lead to disruption of protected information, with exploitation possible remotely.

Recommendations For FreeRADIUS versions 1.0.3 and 1.0.4, consider updating to a version that fixes the SQL injection vulnerability in the rlm sqlcounter module. At the moment, there is no information about a newer version that contains a fix for this vulnerability in other affected packages.

Correção

Identificadores relacionados

BDU:2015-03123

BDU:2015-03124

BDU:2015-03125

BDU:2015-03126

BDU:2015-03127

CVE-2005-4745

DSA-1145-1

Produtos afetados

Debian

Freeradius

Referências · 17

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4746 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2005-4745 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4745 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03123 · Nota de Segurança
• http://osvdb.org/19323 · Nota
• http://freeradius.org/security.html · Nota
• https://bdu.fstec.ru/vul/2015-03125 · Nota de Segurança
• http://debian.org/security/2006/dsa-1145 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-4745 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4745 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03127 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03124 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4745 · Aviso do Fabricante
• http://securityfocus.com/bid/17294 · Nota
• http://debian.org/security/dsa-1145 · Nota