CVE-2006-4181

Опубликовано: 28 нояб. 2006

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.

Ссылки

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443
Patch
Vendor Advisory
http://secunia.com/advisories/23087
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-17.xml
http://securitytracker.com/id?1017285
Patch
http://www.securityfocus.com/bid/21303
Patch
http://www.vupen.com/english/advisories/2006/4712
https://exchange.xforce.ibmcloud.com/vulnerabilities/30508
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443
Patch
Vendor Advisory
http://secunia.com/advisories/23087
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-17.xml
http://securitytracker.com/id?1017285
Patch
http://www.securityfocus.com/bid/21303
Patch
http://www.vupen.com/english/advisories/2006/4712
https://exchange.xforce.ibmcloud.com/vulnerabilities/30508

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:radius:1.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:radius:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.04997

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-wpp6-rjff-897j

github

больше 4 лет назад