GNU Radius远程格式串处理漏洞

GNU Radius是一款开放源代码远程用户验证和审计服务器。 GNU Radius在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞在服务器上以radius守护程序权限执行任意指令。 GNU Radius的SQL计费代码中使用用户提供的数据构建格式串，然后不安全地传送给了变量参数函数sqllog。这可能允许未经认证的远程攻击者以radius守护程序（radiusd）的权限通常为root用户执行任意指令。 GNU RADIUS 1.3 GNU RADIUS 1.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability

GNU Radius Format String Vulnerability iDefense Security Advisory 11.26.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 26, 2006 I. BACKGROUND GNU Radius is a centralized user authentication and accounting system. It supports back-end SQL databases for accounting. More information c...

GNU RADIUS format string vulnerability

sqllog format string vulnerability if SQL logging is enabled...

D-Link DWL Series Access-Point 2.10na - Config Disclosure

ADVISORY/0206 - D-Link Wireless Access-Point DWL-2100ap INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ , http://www.intruders.org.br/ Making a HTTP request to the /cgi-bin/ directory, the Web server will return error 404 Page not found. Making a HTTP request to the...

security flaw

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...

Cisco IOS AAA RADIUS Long Username Authentication Bypass (CSCee45312)

The remote host is a CISCO router containing a version of IOS that contains a faulty RADIUS implementation which may lead to an authentication bypass vulnerability. An attacker may exploit this problem to gain unauthorized access to the service. C Tenable Network Security, Inc. include"compat.inc...

DEBIAN-CVE-2005-4745

SQL injection vulnerability in the rlmsqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

DEBIAN-CVE-2005-4816

Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...

PT-2005-5409 · Freeradius +1 · Freeradius +1

Name of the Vulnerable Software and Affected Versions: FreeRADIUS versions 1.0.2.5-5 through 1.0.4 Description: The issue is related to an off-by-one error in the sql error function, which might allow remote attackers to cause a denial of service or possibly execute arbitrary code by causing the...

Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability

Hi! The following is the description of the vulnerability in the Cisco implementation of downloadable ACLs, which are used by the Cisco PIX firewall authentication proxy aka cut-through proxy and VPN 3000 concentrators. When an administrator creates an ACL on the Cisco Secure Access Control Serve...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2002-2140

Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using 1 TACACS+ or 2 RADIUS...

CVE-2002-2140

Vulnerability CVE-2002-2140 affects Cisco PIX Firewall software versions 5.2.x (up to 5.2.8), 6.0.x (up to 6.0.3), 6.1.x (up to 6.1.3), and 6.2.x (up to 6.2.1). A buffer overflow in the HTTP traffic authentication path (via TACACS+ or RADIUS) allows remote attackers to cause a denial of service. ...

swisscom-XSS.txt

//\ //\ //\ \ :\ \ :\ \ :\ \:\ \:\ \ :\ / /::\ / /::\ \ :\ //\ /:/:\ //\ /:/:\ //\ \:\ \ :/:// \ :/:// \ :\ / /:/ \ ::/ \ ::/ \ :\ /:/ \ :\ \ :\ \ :/:/ \ :\ \ :\ \ ::/ \/ \/ \/ "It's secure, it's reliable, it's Swiss" HHU --- Homeless Hackers United is a small group of...

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...

SOL3456 - RADIUS authentication bypass vulnerability OpenBSD Security Fix #020

BIG-IP and 3-DNS can be configured to use loginradius for user Command Line Interface CLI authentication. When configured in this manner, both products are vulnerable to possible man-in-the-middle attacks that could result in an attacker gaining unauthorized access to the BIG-IP or 3-DNS system...

security flaw

Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...

FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)

An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...