| Reporter | Title | Published | Views | Family All 84 |
|---|---|---|---|---|
| freeradius -- arbitrary code execution for TLS-based authentication | 10 Sep 201200:00 | – | freebsd | |
| Security fix for the ALT Linux 6 package freeradius version 2.1.10-alt3.M60P.1 | 14 Sep 201200:00 | – | altlinux | |
| Medium: freeradius | 8 Oct 201200:00 | – | amazon | |
| Amazon Linux AMI : freeradius (ALAS-2012-131) | 4 Sep 201300:00 | – | nessus | |
| CentOS 6 : freeradius (CESA-2012:1326) | 3 Oct 201200:00 | – | nessus | |
| CentOS 5 : freeradius2 (CESA-2012:1327) | 3 Oct 201200:00 | – | nessus | |
| Debian DSA-2546-1 : freeradius - stack-based buffer overflows | 12 Sep 201200:00 | – | nessus | |
| Fedora 18 : freeradius-2.2.0-0.fc18 (2012-15342) | 24 Oct 201200:00 | – | nessus | |
| Fedora 17 : freeradius-2.2.0-0.fc17 (2012-15397) | 23 Oct 201200:00 | – | nessus | |
| Fedora 16 : freeradius-2.2.0-0.fc16 (2012-15743) | 18 Oct 201200:00 | – | nessus |
###############################################################################
# OpenVAS Vulnerability Test
#
# Fedora Update for freeradius FEDORA-2012-15743
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
include("revisions-lib.inc");
tag_insight = "The FreeRADIUS Server Project is a high performance and highly configurable
GPL'd free RADIUS server. The server is similar in some respects to
Livingston's 2.0 server. While FreeRADIUS started as a variant of the
Cistron RADIUS server, they don't share a lot in common any more. It now has
many more features than Cistron or Livingston, and is much more configurable.
FreeRADIUS is an Internet authentication daemon, which implements the RADIUS
protocol, as defined in RFC 2865 (and others). It allows Network Access
Servers (NAS boxes) to perform authentication for dial-up users. There are
also RADIUS clients available for Web servers, firewalls, Unix logins, and
more. Using RADIUS allows authentication and authorization for a network to
be centralized, and minimizes the amount of re-configuration which has to be
done when adding or deleting new users.";
tag_affected = "freeradius on Fedora 16";
tag_solution = "Please Install the Updated Packages.";
if(description)
{
script_xref(name : "URL" , value : "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090171.html");
script_id(864788);
script_version("$Revision: 8313 $");
script_tag(name:"last_modification", value:"$Date: 2018-01-08 08:02:11 +0100 (Mon, 08 Jan 2018) $");
script_tag(name:"creation_date", value:"2012-10-19 09:45:38 +0530 (Fri, 19 Oct 2012)");
script_cve_id("CVE-2012-3547");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_xref(name: "FEDORA", value: "2012-15743");
script_name("Fedora Update for freeradius FEDORA-2012-15743");
script_tag(name: "summary" , value: "Check for the Version of freeradius");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (c) 2012 Greenbone Networks GmbH");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms");
script_tag(name : "affected" , value : tag_affected);
script_tag(name : "solution" , value : tag_solution);
script_tag(name : "insight" , value : tag_insight);
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
include("pkg-lib-rpm.inc");
release = get_kb_item("ssh/login/release");
res = "";
if(release == NULL){
exit(0);
}
if(release == "FC16")
{
if ((res = isrpmvuln(pkg:"freeradius", rpm:"freeradius~2.2.0~0.fc16", rls:"FC16")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99); # Not vulnerable.
exit(0);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation