Vulnerabilities

TI-2009-02249 CVE-2009-2359 · GHSA-xwrr-w87j-j7m5

Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers…

LOW 35

Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab;…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0088 Published 2009-07-07 No fix listed CWE-89

TI-2009-02248 CVE-2009-2358 · GHSA-27c9-9r9p-q3x6

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows…

LOW 21

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00293 Published 2009-07-07 No fix listed CWE-255

TI-2009-02247 CVE-2009-2357 · GHSA-v93g-jrxq-6qr3

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with…

MEDIUM 47

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows o…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02146 Published 2009-07-07 No fix listed CWE-16

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers…

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows…

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with…