FreeRADIUS RADIUS server DoS
Published:		10.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10230
Type:		remote
Level:		5/10
Description:		Crash on zero-length Tunnel-Password attribute.

Affected:		FREERADIUS : FreeRADIUS 1.1
CVE:		CVE-2009-3111 (The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes. NOTE: this is a regression error related to CVE-2003-0967.)

Original document

MANDRIVA, [ MDVSA-2009:226 ] freeradius (10.09.2009)

Discuss:

Read or add your comments to this news (0 comments)