1348 matches found
CVE-2005-1455
Buffer overflow in the sqlescapefunc function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service crash...
CVE-2005-1455
Buffer overflow in the sqlescapefunc function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service crash...
CVE-2005-1455
Buffer overflow in the sqlescapefunc function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service crash...
DEBIAN-CVE-2005-1455
Buffer overflow in the sqlescapefunc function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service crash...
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
CVE-2005-1455
CVE-2005-1455 describes a buffer overflow in the sql_escape_func function of the FreeRADIUS SQL module (versions 1.0.2 and earlier) that enables remote attackers to cause a crash/DoS. The connected documents corroborate that freeradius has multiple advisories across platforms (FreeBSD, Gentoo, Re...
CVE-2005-1454
CVE-2005-1454 is a SQL injection in the radius_xlat function of the FreeRADIUS SQL module affecting 1.0.2 and earlier. Remote authenticated users can inject via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries. CVSSv2 base score 7.5 (HIGH). Relate...
CVE-2005-1455
Buffer overflow in the sqlescapefunc function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service crash...
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
GLSA-200505-13 : FreeRADIUS: SQL injection and Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200505-13 FreeRADIUS: SQL injection and Denial of Service vulnerability Primoz Bratanic discovered that the sqlescapefunc function of FreeRADIUS may be vulnerable to a buffer overflow BID 13541. He also discovered that FreeRADIUS...
FreeRADIUS RADIUS server multiple vulnerabilities
Buffer overflow, SQL injection if SQL is used for authentication or accounting...
[Full-disclosure] [ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability
Gentoo Linux Security Advisory GLSA 200505-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
FreeRADIUS: SQL injection and Denial of Service vulnerability
Background FreeRADIUS is an open source RADIUS authentication server implementation. Description Primoz Bratanic discovered that the sqlescapefunc function of FreeRADIUS may be vulnerable to a buffer overflow BID 13541. He also discovered that FreeRADIUS fails to sanitize user-input before using ...
freeradius -- sql injection and denial of service vulnerability
A Gentoo Advisory reports: The FreeRADIUS server is vulnerable to an SQL injection attack and a buffer overflow, possibly resulting in disclosure and modification of data and Denial of Service...
CVE-2004-0961
Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service memory exhaustion via a series of Access-Request packets with 1 Ascend-Send-Secret, 2 Ascend-Recv-Secret, or 3 Tunnel-Password attributes...
CVE-2004-0961
Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service memory exhaustion via a series of Access-Request packets with 1 Ascend-Send-Secret, 2 Ascend-Recv-Secret, or 3 Tunnel-Password attributes...