CVE-2005-4745: SQL Injection
Published Dec 31, 2005
·Updated
SQL injection vulnerability in the rlmsqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Affected Software
2 affected components
FreeRADIUS freeradius=1.0.4
FreeRADIUS freeradius=1.0.3
Event History
Dec 31, 2005
CVE Published
05:00 AM
Mar 28, 2006
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4745?
CVE-2005-4745 is considered a critical vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2005-4745?
To fix CVE-2005-4745, upgrade FreeRADIUS to the latest version that addresses this SQL injection vulnerability.
3
Which versions of FreeRADIUS are affected by CVE-2005-4745?
CVE-2005-4745 affects FreeRADIUS versions 1.0.3 and 1.0.4.
4
What type of vulnerability is CVE-2005-4745?
CVE-2005-4745 is a SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
Can CVE-2005-4745 be exploited remotely?
Yes, CVE-2005-4745 can be exploited by remote attackers, making it a significant security risk.