Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

freeradius freeradius 0.4 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2004-0960
FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.
Freeradius Freeradius 0.3Freeradius Freeradius 0.4Freeradius Freeradius 0.9.3Freeradius Freeradius 1.0.0Freeradius Freeradius 0.5Freeradius Freeradius 0.8Freeradius Freeradius 0.8.1Freeradius Freeradius 0.9Freeradius Freeradius 0.2Freeradius Freeradius 0.9.1Freeradius Freeradius 0.9.2Redhat Enterprise Linux 3.0Redhat Fedora Core Core 2.0
445
VMScore
CVE-2004-0961
Memory leak in FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.
Freeradius Freeradius 0.4Freeradius Freeradius 0.5Freeradius Freeradius 1.0.0Freeradius Freeradius 0.8Freeradius Freeradius 0.8.1Freeradius Freeradius 0.9Freeradius Freeradius 0.9.1Freeradius Freeradius 0.2Freeradius Freeradius 0.3Freeradius Freeradius 0.9.2Freeradius Freeradius 0.9.3Redhat Enterprise Linux 3.0Redhat Fedora Core Core 2.0
505
VMScore
CVE-2009-3111
The rad_decode function in FreeRADIUS prior to 1.1.8 allows remote malicious users to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 up to and including 8.11. NOTE: this ...
Freeradius Freeradius 0.2Freeradius Freeradius 0.4Freeradius Freeradius 1.0.3Freeradius Freeradius 1.0.4Freeradius FreeradiusFreeradius Freeradius 1.0.2Freeradius Freeradius 0.9Freeradius Freeradius 0.8.1Freeradius Freeradius 1.1.5Freeradius Freeradius 1.0.5Freeradius Freeradius 0.3Freeradius Freeradius 0.8Freeradius Freeradius 0.5Freeradius Freeradius 1.0.1Freeradius Freeradius 1.1.3Freeradius Freeradius 0.9.1Freeradius Freeradius 0.9.2Freeradius Freeradius 0.9.3Freeradius Freeradius 1.0.0Freeradius Freeradius 1.1.0Freeradius Freeradius 1.1.6
534
VMScore
CVE-2011-4966
modules/rlm_unix/rlm_unix.c in FreeRADIUS prior to 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Freeradius Freeradius 2.1.4Freeradius Freeradius 2.1.12Freeradius Freeradius 0.2Freeradius Freeradius 0.4Freeradius Freeradius 1.0.1Freeradius Freeradius 1.0.2Freeradius Freeradius 1.1.3Freeradius Freeradius 1.1.5Freeradius Freeradius 2.1.2Freeradius FreeradiusFreeradius Freeradius 2.1.3Freeradius Freeradius 0.1Freeradius Freeradius 2.0.4Freeradius Freeradius 2.1.9Freeradius Freeradius 0.8.1Freeradius Freeradius 0.9.3Freeradius Freeradius 1.0.0Freeradius Freeradius 0.9.1Freeradius Freeradius 1.1.2Freeradius Freeradius 1.1.4Freeradius Freeradius 1.1.8Freeradius Freeradius 0.6
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook