CVE-2005-4744

Description

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

6.4

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 2.53% Top 20%

Vendor Advisory sgi.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc	vendor advisory
http://www.securityfocus.com/bid/14775	vdb entry patch
http://secunia.com/advisories/20461	third party advisory
http://www.freeradius.org/security/20050909-response-to-suse.txt
http://secunia.com/advisories/19811	third party advisory
http://www.freeradius.org/security/20050909-vendor-sec.txt
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:066	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10449	vdb entry signature
http://www.debian.org/security/2006/dsa-1089	vendor advisory
http://secunia.com/advisories/19497	third party advisory
http://secunia.com/advisories/16712	third party advisory vendor advisory
http://rhn.redhat.com/errata/RHSA-2006-0271.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22211	vdb entry
http://secunia.com/advisories/19518	third party advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676

Frequently Asked Questions

What is the severity of CVE-2005-4744?: CVE-2005-4744 has been scored as a medium severity vulnerability.
How to fix CVE-2005-4744?: To fix CVE-2005-4744, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-4744 being actively exploited in the wild?: It is possible that CVE-2005-4744 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~3% probability that this vulnerability will be exploited by malicious actors in the next 30 days.