Bug 91754

Summary:	FreeRadius RLM_SQL.C Buffer Overflow Vulnerability
Product:	Gentoo Security	Reporter:	Adir Abraham <adirab>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.securityfocus.com/bid/13541
Whiteboard:
Package list:		Runtime testing required:	---

Description Adir Abraham 2005-05-06 18:11:25 UTC

From securityfocus.com:

FreeRadius is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data.

Remote code execution may be possible; this has not been confirmed.


Reproducible: Always
Steps to Reproduce:

Comment 1 Robert Paskowitz (RETIRED) gentoo-dev

2005-05-06 18:28:01 UTC


*** This bug has been marked as a duplicate of 91736 ***