NVD

Id
70333  
Name
CVE-2005-4744  
Description
Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2010-08-21  
Seq
2005-4744  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
362604 70333 CVE-2005-4744 20060404-01-U  View
362605 70333 CVE-2005-4744 oval:org.mitre.oval:def:10449  View
362606 70333 CVE-2005-4744 RHSA-2006:0271  View
362607 70333 CVE-2005-4744 DSA-1089  View
362608 70333 CVE-2005-4744 http://www.freeradius.org/security/20050909-response-to-suse.txt  View
362609 70333 CVE-2005-4744 http://www.freeradius.org/security/20050909-vendor-sec.txt  View
362610 70333 CVE-2005-4744 14775  View
362611 70333 CVE-2005-4744 MDKSA-2006:066  View
362612 70333 CVE-2005-4744 freeradius-token-sqlunixodbc-dos(22211)  View
362613 70333 CVE-2005-4744 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62319 JVNDB-2005-000521 FreeRADIUS の sql_unixodbc.c における off-by-one エラーが発生する脆弱性 FreeRADIUS の sql_unixodbc モジュール (sql_unixodbc.c) には、認証に利用する外部データベースから返される SQL エラーの処理において、メモリ割り当てが不適切であるため、off-by-one エラーによるオーバーフローが発生する脆弱性が存在します。 CVE-2005-4744 15946 CVE-2005-4744 70333 6.4 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000521.html 2005-09-09 2007-04-01 View