Oracle Linux 6 : freeradius (ELSA-2015-1287)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1287 advisory. 2.2.6-4 - Move OpenSSL init out of version check Resolves: Bug1189394 radiusd segfaults after update - Comment-out ippool-dhcp.conf inclusion Resolves: Bug11893...

freeradius security, bug fix, and enhancement update

2.2.6-4 - Move OpenSSL init out of version check Resolves: Bug1189394 radiusd segfaults after update - Comment-out ippool-dhcp.conf inclusion Resolves: Bug1189386 radiusd fails to start after 'clean' installation 2.2.6-3 - Disable OpenSSL version check Resolves: Bug1189011 2.2.6-2 - Fix a number ...

Buffer overflow

Buffer overflow in lib/loadhttp.c in ippool in Darren Reed IPFilter aka IP Filter 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL...

CVE-2009-1476

CVE-2009-1476 affects Darren Reed IPFilter (IPFilter) 4.1.31. The issue is a buffer overflow in lib/load_http.c (local buffer 1024 bytes) used when building an HTTP request for IP pool management. The code copies the URL into a 1024-byte buffer and also builds the GET line with the URL, with a pa...