UBUNTU-CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

CVE-2013-2220

Removed by vendor...

CVE-2013-2220

The CVE-2013-2220 entry describes a buffer overflow in the Radius extension for PHP (before version 1.2.7) affecting the radius_get_vendor_attr function when processing large Vendor Specific Attributes (VSA). The underlying issue is an assumption that VSA lengths are valid, which can be exploited...

PT-2013-5124

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.1.1 Description The management console on the Symantec Web Gateway appliance does not properly implement RADIUS authentication. This issue allows remote attackers to execute arbitrary code by leveraging...

CVE-2013-4673: Improper Input Validation

The management console on the Symantec Web Gateway SWG appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt...

CVE-2013-2220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

Debian DSA-2726-1 : php-radius - buffer overflow

A buffer overflow has been discovered in the Radius extension for PHP. The function handling Vendor Specific Attributes assumed that the attributes given would always be of valid length. An attacker could use this assumption to trigger a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 2726-1] php-radius security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2726-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 25, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2726-1 (php-radius - buffer overflow)

A buffer overflow has been discovered in the Radius extension for PHP. The function handling Vendor Specific Attributes assumed that the attributes given would always be of valid length. An attacker could use this assumption to trigger a buffer overflow. OpenVAS Vulnerability Test $Id: deb2726.na...

DSA-2726-1 php-radius - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2726-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : php-pecl-radius-1.2.7-1.fc18 (2013-11998)

Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation fault. Adam - Fixed a crash when calling...

Fedora 19 : php-pecl-radius-1.2.7-1.fc19 (2013-11911)

RPM change : - provide the ZTS extension Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation...

Fedora 17 : php-pecl-radius-1.2.7-1.fc17 (2013-11992)

Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation fault. Adam - Fixed a crash when calling...

MGASA-2013-0206 Updated php-radius packages fix CVE-2013-2220

Updated php-radius package fixes security vulnerability: Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size CVE-2013-2220...

Updated php-radius packages fix CVE-2013-2220

Updated php-radius package fixes security vulnerability: Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size CVE-2013-2220...

[SECURITY] Fedora 19 Update: php-pecl-radius-1.2.7-1.fc19

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

[SECURITY] Fedora 18 Update: php-pecl-radius-1.2.7-1.fc18

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...