Lucene search

K
cve[email protected]CVE-2006-4181
HistoryNov 28, 2006 - 2:07 a.m.

CVE-2006-4181

2006-11-2802:07:00
NVD-CWE-Other
web.nvd.nist.gov
17
cve-2006-4181
format string vulnerability
gnu radius
sql accounting
remote code execution
nvd

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.463 Medium

EPSS

Percentile

97.4%

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.463 Medium

EPSS

Percentile

97.4%