Lucene search
Ubuntu.comUB:CVE-2011-4966HistoryMar 12, 2013 - 12:00 a.m.
CVE-2011-4966
2013-03-1200:00:00
ubuntu.com
ubuntu.com
5
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is
enabled for user authentication, does not properly check the password
expiration in /etc/shadow, which allows remote authenticated users to
authenticate using an expired password.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | freeradius | < 2.1.8+dfsg-1ubuntu1.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | freeradius | < 2.1.10+dfsg-3ubuntu0.12.04.2 | UNKNOWN |
| ubuntu | 12.10 | noarch | freeradius | < 2.1.12+dfsg-1.1ubuntu0.1 | UNKNOWN |
Related
debiancve
debiancve
CVE-2011-4966
2013-03-12 23:55:00
openvas
openvas
RedHat Update for freeradius2 RHSA-2013:0134-01
2013-01-11 00:00:00
RedHat Update for freeradius2 RHSA-2013:0134-01
2013-01-11 00:00:00
CentOS Update for freeradius2 CESA-2013:0134 centos5
2013-01-21 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:50:49
prion
prion
Design/Logic Flaw
2013-03-12 23:55:00
nessus
nessus
openSUSE Security Update : freeradius-server (openSUSE-SU-2013:0137-1)
2014-06-13 00:00:00
RHEL 5 : freeradius2 (RHSA-2013:0134)
2013-01-08 00:00:00
SuSE 11.2 Security Update : freeradius (SAT Patch Number 7255)
2013-02-28 00:00:00
redhat
redhat
(RHSA-2013:0134) Low: freeradius2 security and bug fix update
2013-01-08 00:00:00
centos
centos
freeradius2 security update
2013-01-09 19:53:35
cve
cve
CVE-2011-4966
2013-03-12 23:55:00
cbl_mariner
cbl_mariner
CVE-2011-4966 affecting package freeradius 3.2.3-2
2024-05-04 21:06:47
securityvulns
securityvulns
[USN-2122-1] FreeRADIUS vulnerabilities
2014-02-28 00:00:00
FreeRADIUS security vulnerabilities
2014-02-28 00:00:00
oraclelinux
oraclelinux
freeradius2 security and bug fix update
2013-01-11 00:00:00
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2014-02-26 00:00:00
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
Related for UB:CVE-2011-4966