Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Radius远程格式串处理漏洞
Vulnerability Description
GNU Radius是一款开放源代码远程用户验证和审计服务器。 GNU Radius在处理用户请求时存在漏洞,远程攻击者可能利用此漏洞在服务器上以radius守护程序权限执行任意指令。 GNU Radius的SQL计费代码中使用用户提供的数据构建格式串,然后不安全地传送给了变量参数函数sqllog。未经认证的远程攻击者以radius守护程序(radiusd)的权限(通常为root用户)执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A