[SECURITY] Fedora 26 Update: freeradius-3.0.15-1.fc26

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 26 Update: freeradius-3.0.14-1.fc26

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 25 Update: freeradius-3.0.14-1.fc25

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

Vulnerability of Cisco ASA software, allowing attackers to increase their privileges

A vulnerability exists in the loaded list function of RADIUS in Cisco PIX and VPN 3000 concentrators. This vulnerability arises when a random internal name is generated for the RADIUS ACL list, which is also used as a hidden user name and password. Exploiting this vulnerability allows malicious...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system’s RADIUS client implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger service interruptions by sending specially crafted messages via the RADIUS protocol...

The vulnerability of Cisco IPS’s intrusion detection system’s microprogramming software allows a remote attacker to trigger a service failure.

The vulnerability of the Context Directory Agent component allows a remote attacker to modify device cache using specially crafted RADIUS protocol packets...

[SECURITY] Fedora 19 Update: freeradius-2.2.3-7.fc19

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 20 Update: freeradius-3.0.1-4.fc20

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

Debian DSA-2573-1 : radsecproxy - SSL certificate verification weakness

Ralf Paffrath reported that Radsecproxy, a RADIUS protocol proxy, mixed up pre- and post-handshake verification of clients. This vulnerability may wrongly accept clients without checking their certificate chain under certain configurations. Raphael Geissert spotted that the fix for CVE-2012-4523...

[SECURITY] Fedora 18 Update: freeradius-2.2.0-0.fc18

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 17 Update: freeradius-2.2.0-0.fc17

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 16 Update: freeradius-2.2.0-0.fc16

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)

The RADIUS protocol is used for the authentication, authorization and accounting of various network services. RADIUS is most often used by operating systems and hardware devices that provide network access to remote users. There is a large number of RADIUS implementations available, both commerci...

GNU Radius SQL Accounting Format String (CVE-2006-4181)

GNU Radius is a suite of applications which perform user authentication and accounting using the Remote Authentication Dial In User Service RADIUS protocol. The RADIUS protocol is specifically designed for authentication, authorization and accounting of various network services. RADIUS is most...

[SECURITY] Fedora Core 6 Update: freeradius-1.1.3-2.fc6

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability

Hi! The following is the description of the vulnerability in the Cisco implementation of downloadable ACLs, which are used by the Cisco PIX firewall authentication proxy aka cut-through proxy and VPN 3000 concentrators. When an administrator creates an ACL on the Cisco Secure Access Control Serve...

security flaw

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

DEBIAN-CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...

freeRADIUS Server vulnerable to a denial-of-service attack

Overview Multiple vulnerabilities in freeRADIUS Server may allow attackers to cause a denial-of-service condition. Description The Remote Authentication Dial In User Service RADIUS protocol is used for remote user authentication and accounting. freeRADIUS Server is an popular open-source RADIUS...