PT-2013-4873 · Yard · Yard Radius

Hamid Zamani · Published 2013-08-09 · Updated 2017-08-29 · CVE-2013-4147

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions YARD RADIUS version 1.1.2

Description The issue concerns multiple format string vulnerabilities that allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code. This is achieved through format string specifiers in a request, specifically in the log msg function in log.c, or the version or build version function in version.c.

Recommendations For YARD RADIUS version 1.1.2, consider disabling the log msg function in log.c, as well as the version and build version functions in version.c, until a patch is available to prevent potential exploitation. Restrict access to these functions to minimize the risk of a denial of service or arbitrary code execution.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2013-4147

Affected Products

Yard Radius

References · 7

• 🔥 https://exploit-db.com/exploits/38672 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4147 · Security Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714612 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85892 · Note
• http://osvdb.org/95518 · Note
• http://cxsecurity.com/issue/WLB-2013070028 · Note
• http://seclists.org/oss-sec/2013/q3/145 · Note