CVE-2006-4181

Published: Nov 28, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.

Affected (2)

Products: Gnu: Radius

Gnu

1 product

Radius

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnu Radius	Version 1.2
Gnu Radius	Version 1.3

References (14)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/23087

Source: cve@mitre.org

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200612-17.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017285

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/21303

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/4712

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30508

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443