Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Gentoo: GLSA-200612-17 High: GNU Radius Format String Threat

gentoo
Calendar Grey December 14, 2006
Dist Gentoo Esm H88
An urgent security alert highlights a critical format string vulnerability found in the GNU Radius application, which could potentially allow for remote code execution.
A format string vulnerabilty has been found in GNU Radius, which could lead to the remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200612-17 https://security.gentoo.org/ Severity: High Title: GNU Radius: Format string vulnerability Date: December 14, 2006 Bugs: #156376 ID: 200612-17

Synopsis ======= A format string vulnerabilty has been found in GNU Radius, which could lead to the remote execution of arbitrary code.
Background ========= GNU Radius is a GNU version of Radius, a server for remote user authentication and accounting.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-dialup/gnuradius < 1.4 >= 1.4
========== A format string vulnerability was found in the sqllog function from the SQL accounting code for radiusd. That function is only ...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here