Red Hat Security AdvisoryRHSA-2013:0134
freeradius2 security and bug fix update
Released 2013-01-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freeradius2-2.1.12-5.el5, freeradius2-2.1.12-5.el5.i386, freeradius2-2.1.12-5.el5.ia64 +33
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freeradius2-2.1.12-5.el5, freeradius2-2.1.12-5.el5.i386, freeradius2-krb5-2.1.12-5.el5 +15
Fixes 1 record
Priority LOW 30
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authen…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.01382 · Published 2013-03-12 · Partial fix CWE-255
