FreeRADIUS Multiple Remote Vulnerabilities
BID:14775
Info
FreeRADIUS Multiple Remote Vulnerabilities
| Bugtraq ID: | 14775 |
| Class: | Design Error |
| CVE: |
CVE-2005-4744 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2005 12:00AM |
| Updated: | Dec 07 2006 03:44AM |
| Credit: | The discoverer of these issues is currently unknown. The vendor disclosed these issues. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 7 SuSE Linux Openexchange Server SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 SuSE Linux 8.1 SuSE Linux 8.0 i386 SuSE Linux 8.0 SuSE Linux 7.3 sparc SuSE Linux 7.3 ppc SuSE Linux 7.3 i386 SuSE Linux 7.3 SuSE Linux 7.2 i386 SuSE Linux 7.2 SuSE Linux 7.1 x86 SuSE Linux 7.1 sparc SuSE Linux 7.1 ppc SuSE Linux 7.1 alpha SuSE Linux 7.1 SuSE Linux 7.0 sparc SuSE Linux 7.0 ppc SuSE Linux 7.0 i386 SuSE Linux 7.0 alpha SuSE Linux 7.0 SuSE Linux 6.4 ppc SuSE Linux 6.4 i386 SuSE Linux 6.4 alpha SuSE Linux 6.4 SuSE Linux 6.3 ppc SuSE Linux 6.3 alpha SuSE Linux 6.3 SuSE Linux 6.2 SuSE Linux 6.1 alpha SuSE Linux 6.1 SuSE Linux 6.0 SuSE Linux 5.3 SuSE Linux 5.2 SuSE Linux 5.1 SuSE Linux 5.0 SuSE Linux 4.4.1 SuSE Linux 4.4 SuSE Linux 4.3 SuSE Linux 4.2 SuSE Linux 4.0 SuSE Linux 3.0 SuSE Linux 2.0 SuSE Linux 1.0 SGI ProPack 3.0 SP5 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SuSE eMail Server III S.u.S.E. SuSE eMail Server 3.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Professional 7.3 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Office Server S.u.S.E. Linux IMAP Server 1.0 S.u.S.E. Linux Enterprise Server for S/390 9.0 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux Database Server 0 S.u.S.E. Linux Connectivity Server Redhat Fedora Core3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 FreeRADIUS FreeRADIUS 1.0.4 FreeRADIUS FreeRADIUS 1.0.2 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 |
| Not Vulnerable: |
FreeRADIUS FreeRADIUS 1.0.5 FreeRADIUS FreeRADIUS 1.0.3 |
Discussion
FreeRADIUS Multiple Remote Vulnerabilities
FreeRADIUS is susceptible to multiple remote vulnerabilities:
- Memory-handling vulnerabilities. These issues may allow remote attackers to crash affected services or possibly execute arbitrary machine code in the context of the vulnerable application.
- File descriptor leak. Attackers may exploit this to gain access to files that they may not normally have access to.
- The LDAP module contains a flaw whereby attacker-specified data may be passed on to the configured LDAP database without proper input sanitization.
These issues are all reported to affect version 1.0.4 of FreeRADIUS; previous versions are also likely vulnerable to one or more of these issues.
**Update: The vendor has posted a response to these issues. Please see "Response to Suse Audit Report on FreeRADIUS" for further details.
FreeRADIUS is susceptible to multiple remote vulnerabilities:
- Memory-handling vulnerabilities. These issues may allow remote attackers to crash affected services or possibly execute arbitrary machine code in the context of the vulnerable application.
- File descriptor leak. Attackers may exploit this to gain access to files that they may not normally have access to.
- The LDAP module contains a flaw whereby attacker-specified data may be passed on to the configured LDAP database without proper input sanitization.
These issues are all reported to affect version 1.0.4 of FreeRADIUS; previous versions are also likely vulnerable to one or more of these issues.
**Update: The vendor has posted a response to these issues. Please see "Response to Suse Audit Report on FreeRADIUS" for further details.
Exploit / POC
FreeRADIUS Multiple Remote Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
FreeRADIUS Multiple Remote Vulnerabilities
Solution:
The vendor has released version 1.0.5 of FreeRADIUS to address these issues.
Please see the references for more information and vendor advisories.
FreeRADIUS FreeRADIUS 1.0.2
FreeRADIUS FreeRADIUS 1.0.4
Solution:
The vendor has released version 1.0.5 of FreeRADIUS to address these issues.
Please see the references for more information and vendor advisories.
FreeRADIUS FreeRADIUS 1.0.2
-
FreeRADIUS freeradius-1.0.3.tar.gz
ftp://ftp.freeradius.org/pub/radius/freeradius-1.0.3.tar.gz -
FreeRADIUS freeradius-1.0.5.tar.gz
ftp://ftp.freeradius.org/pub/radius/freeradius-1.0.5.tar.gz
FreeRADIUS FreeRADIUS 1.0.4
-
FreeRADIUS freeradius-1.0.5.tar.gz
ftp://ftp.freeradius.org/pub/radius/freeradius-1.0.5.tar.gz -
Mandriva freeradius-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva freeradius-1.0.4-2.2.20060mdk.src.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva freeradius-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-devel-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-krb5-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-ldap-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-mysql-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-postgresql-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64freeradius1-unixODBC-1.0.4-2.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-devel-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-krb5-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-ldap-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-mysql-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-postgresql-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libfreeradius1-unixODBC-1.0.4-2.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download
References
FreeRADIUS Multiple Remote Vulnerabilities
References:
References:
- 2005.05.01 v1.0.1, v1.0.2 - Two vulnerabilities in the SQL module exist in all v (FreeRADIUS)
- Bugzilla Bug 167676 ? Multiple freeradius security issues (RedHat)
- FreeRADIUS Homepage (FreeRADIUS)
- FreeRADIUS Security Information (FreeRADIUS)
- Grave functionality bugs - resolved (3 bugs) (Debian)
- Response to Suse Audit Report on FreeRADIUS. (FreeRADIUS)
- RHSA-2005:524-05 - freeradius security update (RedHat)