Published: 09/09/2009 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The rad_decode function in FreeRADIUS prior to 1.1.8 allows remote malicious users to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 up to and including 8.11. NOTE: this is a regression error related to CVE-2003-0967.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeradius freeradius 0.2
freeradius freeradius 0.4
freeradius freeradius 1.0.3
freeradius freeradius 1.0.4
freeradius freeradius
freeradius freeradius 1.0.2
freeradius freeradius 0.9
freeradius freeradius 0.8.1
freeradius freeradius 1.1.5
freeradius freeradius 1.0.5
freeradius freeradius 0.3
freeradius freeradius 0.8
freeradius freeradius 0.5
freeradius freeradius 1.0.1
freeradius freeradius 1.1.3
freeradius freeradius 0.9.1
freeradius freeradius 0.9.2
freeradius freeradius 0.9.3
freeradius freeradius 1.0.0
freeradius freeradius 1.1.0
freeradius freeradius 1.1.6

It was discovered that FreeRADIUS did not correctly handle certain malformed attributes A remote attacker could exploit this flaw and cause the FreeRADIUS server to crash, resulting in a denial of service ...

#!/usr/bin/env python # FreeRadius Packet Of Death # Matthew Gillespie 2009-09-11 # Requires RadiusAttr tracsecdevorg/scapy/attachment/ticket/92/radiuslibpy # wwwbraindeadprojectscom/blog/what/freeradius-packet-of-death/ import sys from scapyall import IP,UDP,send,Radius,RadiusAttr if len(sysargv) != 2: print "Usage: radius_ ...

NVD-CWE-Other https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html http://www.openwall.com/lists/oss-security/2009/09/09/1 http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4 http://www.redhat.com/support/errata/RHSA-2009-1451.html http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html http://support.apple.com/kb/HT3937 http://www.vupen.com/english/advisories/2009/3184 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html http://intevydis.com/vd-list.shtml http://www.securityfocus.com/bid/36263 http://secunia.com/advisories/36509 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919 https://usn.ubuntu.com/832-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/9642/

CVE-2009-3111

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect