GNU Radius SQLLog Remote Format String Vulnerability

GNU Radius SQLLog Remote Format String Vulnerability

GNU Radius is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before including it in the format-specifier argument of a formatted-printing function.

Successfully exploiting this issue allows remote attackers to execute arbitrary code with superuser privileges, since the daemon typically runs with elevated privileges. This facitates the complete compromise of affected computers.

GNU Radius versions 1.2 and 1.3 are vulnerable to this issue; other versions may also be affected.