Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 490
Alerts This Week
Warning Icon 1 490

Gentoo: GLSA-200505-14 Critical: MySQL Buffer Overrun and Code Execution

gentoo
Calendar Grey May 17, 2005
Scroller Gentoo
The Debian security advisory DSA-1234-2 discusses a flaw in OpenSSH that could lead to unauthorized access to user accounts.
The FreeRADIUS server is vulnerable to a buffer overflow and an SQL injection attack, possibly allowing the compromise of the system.

Summary

Gentoo Linux Security Advisory GLSA 200505-13 https://security.gentoo.org/ Severity: High Title: FreeRADIUS: Buffer overflow and SQL injection vulnerability Date: May 17, 2005 Bugs: #91736 ID: 200505-13

Synopsis ======= The FreeRADIUS server is vulnerable to a buffer overflow and an SQL injection attack, possibly allowing the compromise of the system.
Background ========= FreeRADIUS is an open source RADIUS authentication server implementation.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dialup/freeradius < 1.0.2-r3 >= 1.0.2-r3
========== Primoz Bratanic discovered that the sql_escape_func function of FreeRADIUS may be vulnerable to a buffer overflow...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround