----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
FreeRADIUS Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA16712

VERIFY ADVISORY:
http://secunia.com/advisories/16712/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information, DoS

WHERE:
>From local network

SOFTWARE:
FreeRADIUS 1.x
http://secunia.com/product/3921/

DESCRIPTION:
Some vulnerabilities have been reported in FreeRADIUS, which
potentially can be exploited by malicious people to disclose certain
sensitive information or cause a DoS (Denial of Service).

1) A boundary error in the handling of environment variables in the
"radius_exec_program()" function in exec.c can potentially cause a
stack-based buffer overflow and crash the system.

2) Off-by-one errors in token.c and sql_unixodbc.c can potentially
cause a crash.

3) A boundary error in xlat.c when handling replies from the server
may overflow a variable on the stack.

4) An error in validating the results of the "strftime()" function
call in xlat.c can cause a memory leak of 40 bytes from the stack.

5) An error in escaping ldap data in rlm_ldap.c may disclose certain
ldap data via a malformed query.

The vulnerabilities affect version 1.0.4. Prior versions may also be
affected.

SOLUTION:
The vulnerabilities have been fixed in the CVS repositories.

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
Red Hat:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167677

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------