SuSE 10 Security Update : freeradius (ZYPP Patch Number 6499)

This update of freeradius fixes a remote denial-of-service bug in function raddecode which can be triggered by zero-length Tunnel-Password attributes to make radiusd crash. CVE-2009-3111 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2009-3111

CVE-2009-3111 affects FreeRADIUS: the rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to crash radiusd via zero-length Tunnel-Password attributes (DoS). This regression traces from CVE-2003-0967. Multiple connected advisories confirm the issue and reference a fix in FreeRAD...