Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.

A remote attacker may be able to crash the freeRADIUS Server due to three independent bugs in the function which does improper checking values while processing RADIUS attributes.

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available for Red Hat Enterprise Linux 3.

FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for a network.

A number of flaws were found in FreeRADIUS versions prior to 1.0.1. An attacker who is able to send packets to the server could construct carefully constructed packets in such a way as to cause the server to consume memory or crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2004-0938, CVE-2004-0960, and CVE-2004-0961 to these issues.

Users of FreeRADIUS should update to these erratum packages that contain FreeRADIUS 1.0.1, which is not vulnerable to these issues and also corrects a number of bugs.

The remote host is affected by the vulnerability described in GLSA-200409-29 (FreeRADIUS: Multiple Denial of Service vulnerabilities)

    There are undisclosed defects in the way FreeRADIUS handles incorrect     received packets.
  Impact :

    A remote attacker could send specially crafted packets to the     FreeRADIUS server to deny service to other users by crashing the     server.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
18867	FreeBSD : freeradius -- denial-of-service vulnerability (20dfd134-1d39-11d9-9be9-000c6e8f12ef)	Nessus	FreeBSD Local Security Checks	medium
15701	RHEL 3 : freeradius (RHSA-2004:609)	Nessus	Red Hat Local Security Checks	medium
14797	GLSA-200409-29 : FreeRADIUS: Multiple Denial of Service vulnerabilities	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2004-0961

high

Tenable Plugins

medium

medium

medium