A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a219299297 advisory.

    Automatic update for tacacs-F4.0.4.28.7fb~20231005g4fdf178-1.fc40.

    ##### **Changelog**

    ```
    * Thu Oct  5 2023 Davide Cavalca <dcavalca@fedoraproject.org> - F4.0.4.28.7fb~20231005g4fdf178-1
    - Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ#2242402

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202402-13 (TACACS+: Remote Code Execution)

  - A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth     commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to     tac_plus to inject shell commands and gain remote code execution on the tac_plus server. (CVE-2023-45239)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-96c21ed09c advisory.

    Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ#2242402

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6f9e904861 advisory.

    Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ#2242402

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ef2653f707 advisory.

    Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ#2242402

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
194589	Fedora 40 : tacacs (2023-a219299297)	Nessus	Fedora Local Security Checks	critical
190666	GLSA-202402-13 : TACACS+: Remote Code Execution	Nessus	Gentoo Local Security Checks	critical
185299	Fedora 39 : tacacs (2023-96c21ed09c)	Nessus	Fedora Local Security Checks	critical
182667	Fedora 38 : tacacs (2023-6f9e904861)	Nessus	Fedora Local Security Checks	critical
182661	Fedora 37 : tacacs (2023-ef2653f707)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2023-45239

critical

Tenable Plugins

critical

critical

critical

critical

critical