UBUNTU-CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

CVE-2013-2220

The CVE-2013-2220 entry describes a buffer overflow in the Radius extension for PHP (before version 1.2.7) affecting the radius_get_vendor_attr function when processing large Vendor Specific Attributes (VSA). The underlying issue is an assumption that VSA lengths are valid, which can be exploited...

CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

Debian DSA-2726-1 : php-radius - buffer overflow

A buffer overflow has been discovered in the Radius extension for PHP. The function handling Vendor Specific Attributes assumed that the attributes given would always be of valid length. An attacker could use this assumption to trigger a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 2726-1] php-radius security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2726-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 25, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2726-1 (php-radius - buffer overflow)

A buffer overflow has been discovered in the Radius extension for PHP. The function handling Vendor Specific Attributes assumed that the attributes given would always be of valid length. An attacker could use this assumption to trigger a buffer overflow. OpenVAS Vulnerability Test $Id: deb2726.na...

DSA-2726-1 php-radius - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2726-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : php-pecl-radius-1.2.7-1.fc18 (2013-11998)

Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation fault. Adam - Fixed a crash when calling...

Fedora 17 : php-pecl-radius-1.2.7-1.fc17 (2013-11992)

Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation fault. Adam - Fixed a crash when calling...

Fedora 19 : php-pecl-radius-1.2.7-1.fc19 (2013-11911)

RPM change : - provide the ZTS extension Version 1.2.7 - Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size. Adam Version 1.2.6 - Support added for PHP 5.4 and 5.5. Johannes - Fixed bug 60885 Radius module causing Apache segmentation...

Updated php-radius packages fix CVE-2013-2220

Updated php-radius package fixes security vulnerability: Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size CVE-2013-2220...

MGASA-2013-0206 Updated php-radius packages fix CVE-2013-2220

Updated php-radius package fixes security vulnerability: Fix a security issue in radiusgetvendorattr by enforcing checks of the VSA length field against the buffer size CVE-2013-2220...

[SECURITY] Fedora 19 Update: php-pecl-radius-1.2.7-1.fc19

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

[SECURITY] Fedora 18 Update: php-pecl-radius-1.2.7-1.fc18

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

[SECURITY] Fedora 17 Update: php-pecl-radius-1.2.7-1.fc17

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

PT-2013-3606

Name of the Vulnerable Software and Affected Versions PHP Radius extension versions prior to 1.2.7 Description The issue is related to a buffer overflow in the radius get vendor attr function, which can be exploited by remote attackers to cause a denial of service crash and potentially execute...

Fedora Update for php-pecl-radius FEDORA-2013-11998

Check for the Version of php-pecl-radius OpenVAS Vulnerability Test Fedora Update for php-pecl-radius FEDORA-2013-11998 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for php-pecl-radius FEDORA-2013-11992

Check for the Version of php-pecl-radius OpenVAS Vulnerability Test Fedora Update for php-pecl-radius FEDORA-2013-11992 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...