Published: 31/12/2005 Updated: 02/04/2010

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote malicious users to cause denial of service (crash) via (1) the rlm_sqlcounter module or (2) unknown vectors "while expanding %t".

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeradius freeradius 1.0.3
freeradius freeradius 1.0.4

Several remote vulnerabilities have been discovered in freeradius, a high-performance RADIUS server, which may lead to SQL injection or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4745 An SQL injection vulnerability has been discovered in the rlm_sqlcounter module CVE-200 ...

NVD-CWE-Other http://www.freeradius.org/security.html http://www.osvdb.org/19324 http://www.osvdb.org/19325 http://www.securityfocus.com/bid/17293 http://www.debian.org/security/2006/dsa-1145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:066 http://www.mandriva.com/security/advisories?name=MDKSA-2007:092 https://nvd.nist.gov https://www.debian.org/security/./dsa-1145

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-4746

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect