Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Gentoo Linux Security Advisory GLSA 200505-13
https://security.gentoo.org/
Severity: High
Title: FreeRADIUS: Buffer overflow and SQL injection vulnerability
Date: May 17, 2005
Bugs: #91736
ID: 200505-13
Synopsis
=======
The FreeRADIUS server is vulnerable to a buffer overflow and an SQL
injection attack, possibly allowing the compromise of the system.
Background
=========
FreeRADIUS is an open source RADIUS authentication server
implementation.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-dialup/freeradius < 1.0.2-r3 >= 1.0.2-r3
==========
Primoz Bratanic discovered that the sql_escape_func function of
FreeRADIUS may be vulnerable to a buffer overflow...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.