Lucene search
HistoryJul 07, 2009 - 11:30 p.m.
CVE-2009-2357
cve-2009-2357
tekradius 3.0
default configuration
remote attack
privileged access
sql server
windows os
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.
Affected configurations
Node
yasinkaplantekradiusMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| yasinkaplan:tekradius | yasinkaplan tekradius | eq | 3.0 |
Related
cvelist
cvelist
CVE-2009-2357
2009-07-07 23:00:00
prion
prion
Default configuration
2009-07-07 23:30:00
nvd
nvd
CVE-2009-2357
2009-07-07 23:30:00
seebug
seebug
TekRADIUS SQL注入及不安全权限漏洞
2009-07-10 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
Related for CVE-2009-2357