|
|
>> Mandriva Security Update Fixes FreeRADIUS SQL Injection and DoS Vulnerabilities
|
Title : Mandriva Security Update Fixes FreeRADIUS SQL Injection and DoS Vulnerabilities
VUPEN ID : VUPEN/ADV-2007-1498
CVE ID : CVE-2005-4745 - CVE-2005-4746
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-04-24
|
Multiple vulnerabilities were identified in Mandriva, which could be exploited by attackers to cause a denial of service or disclose sensitive information. These issues are caused by errors in FreeRADIUS. For additional information, see : VUPEN/ADV-2005-1674
Affected Products
Mandriva Corporate 4.0
Solution
Upgrade the affected packages :
Corporate 4.0:
523055be4399355565d6175d7df13ca7 corporate/4.0/i586/freeradius-1.0.4-2.4.20060mlcs4.i586.rpm
4e000a3cb2c8cb2f3359a961878a310a corporate/4.0/i586/libfreeradius1-1.0.4-2.4.20060mlcs4.i586.rpm
3e9f17beada7d6d10235c6db8156a77a corporate/4.0/i586/libfreeradius1-devel-1.0.4-2.4.20060mlcs4.i586.rpm
0429cf3dda93772e358fc34a1d5cb1f8 corporate/4.0/i586/libfreeradius1-krb5-1.0.4-2.4.20060mlcs4.i586.rpm
216c28ffac0b1d03a493d5548556be2d corporate/4.0/i586/libfreeradius1-ldap-1.0.4-2.4.20060mlcs4.i586.rpm
07ebd1dbb7d4f1a71253ebab163f1dd8 corporate/4.0/i586/libfreeradius1-mysql-1.0.4-2.4.20060mlcs4.i586.rpm
9b3586d1c94b6cf650723a095db846d7 corporate/4.0/i586/libfreeradius1-postgresql-1.0.4-2.4.20060mlcs4.i586.rpm
10b8fb70adfc1a641b2f63c041db1069 corporate/4.0/i586/libfreeradius1-unixODBC-1.0.4-2.4.20060mlcs4.i586.rpm
0fb72186b61687df8dedff8d874fbb86 corporate/4.0/SRPMS/freeradius-1.0.4-2.4.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
435d07e3a5878cb0fd27e02fbee702df corporate/4.0/x86_64/freeradius-1.0.4-2.4.20060mlcs4.x86_64.rpm
f57c46977fbd86772852f21d138605de corporate/4.0/x86_64/lib64freeradius1-1.0.4-2.4.20060mlcs4.x86_64.rpm
bcc4dc4cac18ed3d034483de311fe240 corporate/4.0/x86_64/lib64freeradius1-devel-1.0.4-2.4.20060mlcs4.x86_64.rpm
646309915542dad2b6e68ff130fead11 corporate/4.0/x86_64/lib64freeradius1-krb5-1.0.4-2.4.20060mlcs4.x86_64.rpm
039290c0f429ff9f5ecf1ce13b17765f corporate/4.0/x86_64/lib64freeradius1-ldap-1.0.4-2.4.20060mlcs4.x86_64.rpm
0ca4c838dae5657c3f902ed2234a7286 corporate/4.0/x86_64/lib64freeradius1-mysql-1.0.4-2.4.20060mlcs4.x86_64.rpm
a48ad352690163f2fd90f022007bcd7a corporate/4.0/x86_64/lib64freeradius1-postgresql-1.0.4-2.4.20060mlcs4.x86_64.rpm
e8aea2d0c9a45462ef30ab0113b62164 corporate/4.0/x86_64/lib64freeradius1-unixODBC-1.0.4-2.4.20060mlcs4.x86_64.rpm
0fb72186b61687df8dedff8d874fbb86 corporate/4.0/SRPMS/freeradius-1.0.4-2.4.20060mlcs4.src.rpm
References
http://www.vupen.com/english/advisories/2007/1498
http://archives.mandrivalinux.com/security-announce/2007-04/msg00029.php
ChangeLog
2007-04-24 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
