Red Hat Security AdvisoryRHSA-2006:0271
freeradius security update
Released 2006-04-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 3 freeradius-1.0.1-2.RHEL3.2, freeradius-1.0.1-2.RHEL3.2.i386, freeradius-1.0.1-2.RHEL3.2.ia64 +1
- Red Hat Enterprise Linux AS version 4 freeradius-1.0.1-3.RHEL4.3, freeradius-1.0.1-3.RHEL4.3.i386, freeradius-1.0.1-3.RHEL4.3.ia64 +13
- Red Hat Enterprise Linux ES version 3 freeradius-1.0.1-2.RHEL3.2, freeradius-1.0.1-2.RHEL3.2.i386, freeradius-1.0.1-2.RHEL3.2.ia64
- Red Hat Enterprise Linux ES version 4 freeradius-1.0.1-3.RHEL4.3, freeradius-1.0.1-3.RHEL4.3.i386, freeradius-1.0.1-3.RHEL4.3.ia64 +9
Fixes 2 records
Priority LOW 38
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02826 · Published 2006-03-22 · Fixed
Priority LOW 36
Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute ar…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.04484 · Published 2006-03-28 · Fixed
