CVEvulnerability
CVE-2009-2357
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-16
Description
The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.
Affected configurations
• yasinkaplan tekradius 3.0
Related
Weakness · not in database (1)
References
- http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56 www.nth-dimension.org.uk
- http://www.securityfocus.com/archive/1/504740/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1816 www.vupen.com
- http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56 www.nth-dimension.org.uk
- http://www.securityfocus.com/archive/1/504740/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1816 www.vupen.com