First published: Sat Dec 31 2005(Updated: )
SQL injection vulnerability in the rlm_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
FreeRADIUS FreeRADIUS | =1.0.4 | |
FreeRADIUS FreeRADIUS | =1.0.3 | |
FreeRADIUS | =1.0.3 | |
FreeRADIUS | =1.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4745 is considered a critical vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
To fix CVE-2005-4745, upgrade FreeRADIUS to the latest version that addresses this SQL injection vulnerability.
CVE-2005-4745 affects FreeRADIUS versions 1.0.3 and 1.0.4.
CVE-2005-4745 is a SQL injection vulnerability that allows execution of arbitrary SQL commands.
Yes, CVE-2005-4745 can be exploited by remote attackers, making it a significant security risk.