HPESBUX04931 rev.1 - HP-UX PAM RADIUS, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Cross-Site Request Forgery CSRF, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 - PAM RADIUS, prior to ver. A.03.00.00 - Affected version: HP-UX PAM RADIUS - A.01.00.0...

OPENSUSE-SU-2024:11144-1 pam_radius-2.0.0-1.3 on GA media

These are all security issues fixed in the pamradius-2.0.0-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2021:1896-1 Security update for pam_radius

This update for pamradius fixes the following issues: - CVE-2015-9542: pamradius: buffer overflow in password field bsc1163933...

SUSE-SU-2021:1896-1 Security update for pam_radius

This update for pamradius fixes the following issues: - CVE-2015-9542: pamradius: buffer overflow in password field bsc1163933...

USN-4290-1: libpam-radius-auth vulnerability

It was discovered that libpam-radius-auth incorrectly handled certain long passwords. A remote attacker could possibly use this issue to cause libpam-radius-auth to crash, resulting in a denial of service...

PT-2015-7849

Name of the Vulnerable Software and Affected Versions pam radius version 1.4.0 Description The issue arises from the add password function in pam radius auth.c, which fails to correctly check the length of the input password. This oversight makes it vulnerable to a stack-based buffer overflow...

UBUNTU-CVE-2015-9542

addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy. An attacker could send a crafted password to an application loading the pamradius library and crash it. Arbitrary code...

DEBIAN-CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

DEBIAN-CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...