Red Hat Security AdvisoryRHSA-2009:1451
freeradius security update
Released 2009-09-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freeradius-1.1.3-1.5.el5_4, freeradius-1.1.3-1.5.el5_4.i386, freeradius-1.1.3-1.5.el5_4.ia64 +13
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freeradius-1.1.3-1.5.el5_4, freeradius-1.1.3-1.5.el5_4.i386, freeradius-mysql-1.1.3-1.5.el5_4 +5
Fixes 1 record
Priority LOW 36
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Pr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11176 · Published 2009-09-09 · Fixed
