Secunia

A vulnerability has been reported in GNU Radius, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a format string error within the "sqllog()" function and can be exploited by sending specially crafted strings containing format specifiers.

Successful exploitation allows execution of arbitrary code, but requires that GNU Radius is compiled with SQL support and SQL accounting is enabled.

The vulnerability is reported in versions 1.2 and 1.3. Prior versions may also be affected.

Solution
Update to version 1.4.

Provided and/or discovered by
Discovered by an anonymous person and reported via iDefense Labs.

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443

Deep Links
Links available in Customer Area