1395 matches found
CVE-2003-0967
CVE-2003-0967 affects FreeRADIUS 0.9.2 and earlier. The rad_decode function can crash the daemon (DoS) when processing a short RADIUS string attribute with a tag (e.g., Tunnel-Password). Several connected advisories reference a regression/related issue in later fixes (CVE-2009-3111) but the provi...
CVE-2003-0967
raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...
CVE-2003-0968
Stack-based buffer overflow in SMBLogonServer of the rlmsmb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute...
CVE-2003-0967: Undefined Security Weakness
raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...
CVE-2003-0968: Undefined Security Weakness
Stack-based buffer overflow in SMBLogonServer of the rlmsmb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute...
FreeRADIUS <= 0.9.3 rlm_smb module stack overflow vulnerability
S-Quadra Advisory 2003-11-26 Topic: FreeRADIUS = 0.9.3 rlmsmb module stack overflow vulnerability Severity: High Vendor URL: http://www.freeradius.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20031126.txt Release date: 26 Nov 2003 1. DESCRIPTION The FreeRADIUS Server...
FreeRADIUS: heap exploit and NULL pointer dereference vulnerability
Background FreeRADIUS is a popular open source RADIUS server. Description FreeRADIUS versions below 0.9.3 are vulnerable to a heap exploit, however, the attack code must be in the form of a valid RADIUS packet which limits the possible exploits. Also corrected in the 0.9.3 release is another...
Remote DoS in FreeRADIUS, all versions.
Application: FreeRADIUS, all versions http://www.freeradius.org Summary: A remote DoS, and possibly exploit, exists in all versions of the FreeRADIUS server. All users should upgrade to the latest version, as soon as it is officially release. For later announcements, see: http://www.freeradius.or...
FreeRadius 0.x1.1.x - Tag Field Heap Corruption
FreeRadius 0.x1.1.x - Tag Field Heap Corruption source: https://www.securityfocus.com/bid/9079/info FreeRADIUS is prone to a heap-corruption vulnerability when handling of tag-field input. An attacker may be able to exploit this issue to deny service to legitimate users of a vulnerable FreeRADIUS...
FreeRadius 0.x/1.1.x - Tag Field Heap Corruption
source: https://www.securityfocus.com/bid/9079/info FreeRADIUS is prone to a heap-corruption vulnerability when handling of tag-field input. An attacker may be able to exploit this issue to deny service to legitimate users of a vulnerable FreeRADIUS server. This issue was initially reported as a...
CVE-2002-0318
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service CPU consumption via a flood of Access-Request packets...
CVE-2002-0318
FreeRADIUS RADIUS server (the affected product) is vulnerable to a denial-of-service via a flood of Access-Request packets, causing CPU consumption. The public sources confirm the flaw in CVE-2002-0318 and note that, as of the connected records, there is no patch available for this issue (e.g., C...
CVE-2002-0318: Undefined Security Weakness
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service CPU consumption via a flood of Access-Request packets...
