CVE-2005-4746

Published: Dec 31, 2005Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service (crash) via (1) the rlm_sqlcounter module or (2) unknown vectors "while expanding %t".

Affected (2)

Products: Freeradius: Freeradius

Freeradius

1 product

Freeradius

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 1.0.3
Freeradius Freeradius	Version 1.0.4

References (14)

http://www.debian.org/security/2006/dsa-1145

Source: secalert@redhat.com

http://www.freeradius.org/security.html

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:066

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:092

Source: secalert@redhat.com

http://www.osvdb.org/19324

Source: secalert@redhat.com

http://www.osvdb.org/19325

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17293

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2006/dsa-1145