CVE-2013-4147: High severity Yard Radius Project Yard Radius vulnerability
Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) logmsg function in log.c or (2) version or (3) buildversion function in version.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4147?
CVE-2013-4147 has a medium severity rating due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2013-4147?
To fix CVE-2013-4147, upgrade YARD RADIUS to a version that addresses this vulnerability.
Who is affected by CVE-2013-4147?
CVE-2013-4147 affects users of YARD RADIUS version 1.1.2-4.
What types of attacks can exploit CVE-2013-4147?
CVE-2013-4147 can be exploited via crafted requests that include malicious format string specifiers.
What are the potential impacts of CVE-2013-4147?
The potential impacts of CVE-2013-4147 include system crashes and unauthorized execution of arbitrary code.