Fedora Update for freeradius FEDORA-2014-3192

Check for the Version of freeradius OpenVAS Vulnerability Test Fedora Update for freeradius FEDORA-2014-3192 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for freeradius FEDORA-2014-3184

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : freeradius-3.0.1-4.fc20 (2014-3184)

Fix stack-based buffer overflow flaw in rlmpap module: long password hashes used by the PAP module can cause a buffer overflow which may terminate the server. fixes bug 1068795, string attributes passed to rlmperl module were being truncated. Note that Tenable Network Security has extracted the...

Fedora 19 : freeradius-2.2.3-7.fc19 (2014-3192)

Fix stack-based buffer overflow flaw in rlmpap module: long password hashes used by the PAP module can cause a buffer overflow which may terminate the server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 19 Update: freeradius-2.2.3-7.fc19

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 20 Update: freeradius-3.0.1-4.fc20

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

Ubuntu: Security Advisory (USN-2122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for freeradius USN-2122-1

Check for the Version of freeradius OpenVAS Vulnerability Test $Id: gbubuntuUSN21221.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for freeradius USN-2122-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

FreeRADIUS security vulnerabilities

rlmunix protection bypass, rlmpap memory corruption...

[USN-2122-1] FreeRADIUS vulnerabilities

========================================================================== Ubuntu Security Notice USN-2122-1 February 26, 2014 freeradius vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : freeradius vulnerabilities (USN-2122-1)

It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. CVE-2011-4966 Pierre Carrier discovered that FreeRADIUS incorrectly handled rlmpap hash processing. An authenticated user could use this issue to caus...

USN-2122-1: FreeRADIUS vulnerabilities

It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. CVE-2011-4966 Pierre Carrier discovered that FreeRADIUS incorrectly handled rlmpap hash processing. An authenticated user could use this issue to caus...

Updated freeradius package fixes security vulnerability

SSHA processing in freeradius before 2.2.3 runs into a stack-based buffer overflow in the freeradius rlmpap module if the password source uses an unusually long hashed password CVE-2014-2015...

MGASA-2014-0088 Updated freeradius package fixes security vulnerability

SSHA processing in freeradius before 2.2.3 runs into a stack-based buffer overflow in the freeradius rlmpap module if the password source uses an unusually long hashed password CVE-2014-2015...

CVE-2014-2015

Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...

FreeRADIUS: Multiple vulnerabilities

Background FreeRADIUS is an open source RADIUS authentication server. Description Multiple vulnerabilities have been discovered in FreeRADIUS. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

GLSA-201311-09 : FreeRADIUS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-09 FreeRADIUS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FreeRADIUS. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrar...

Mac OS X : OS X Server < 3.0 Multiple Vulnerabilities

The remote Mac OS X host has a version of OS X Server installed that is prior to 3.0. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the included JSON Ruby Gem, which can be abused to exhaust all available memory resources. CVE-2013-026...

Amazon Linux AMI : freeradius (ALAS-2012-131)

A buffer overflow flaw was discovered in the way radiusd handled the expiration date field in X.509 client certificates. A remote attacker could possibly use this flaw to crash radiusd if it were configured to use the certificate or TLS tunnelled authentication methods such as EAP-TLS, EAP-TTLS,...

Oracle Linux 5 : freeradius (ELSA-2009-1451)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1451 advisory. 1.1.3-1.5 - Security: Fix Tunnel-Password zero-length attributes flaw bug 521912 Resolves: RH BZ522062 - rebase a couple of old patches...