CVEvulnerability
CVE-2006-4181
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
Affected configurations
• gnu radius 1.2
• gnu radius 1.3
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443 Patch, Vendor Advisory
- http://secunia.com/advisories/23087 Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200612-17.xml security.gentoo.org
- http://securitytracker.com/id?1017285 Patch
- http://www.securityfocus.com/bid/21303 Patch
- http://www.vupen.com/english/advisories/2006/4712 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30508 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443 Patch, Vendor Advisory
- http://secunia.com/advisories/23087 Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200612-17.xml security.gentoo.org
- http://securitytracker.com/id?1017285 Patch
- http://www.securityfocus.com/bid/21303 Patch
- http://www.vupen.com/english/advisories/2006/4712 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30508 exchange.xforce.ibmcloud.com