FreeRADIUS Zero-length Tunnel-Password Attributes Denial of Service Vulnerability

FreeRADIUS Zero-length Tunnel-Password Attributes Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Ubuntu Ubuntu Linux 8.04 LTS powerpc

Ubuntu freeradius-dbg_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-dbg_1.1.7-1u buntu0.2_powerpc.deb

Ubuntu freeradius-dialupadmin_1.1.7-1ubuntu0.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-di alupadmin_1.1.7-1ubuntu0.2_all.deb

Ubuntu freeradius-iodbc_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-iodbc_1.1.7- 1ubuntu0.2_powerpc.deb

Ubuntu freeradius-krb5_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-krb5_1.1.7-1 ubuntu0.2_powerpc.deb

Ubuntu freeradius-ldap_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-ldap_1.1.7-1 ubuntu0.2_powerpc.deb

Ubuntu freeradius-mysql_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-mysql_1.1.7- 1ubuntu0.2_powerpc.deb

Ubuntu freeradius-postgresql_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-postgresql_1 .1.7-1ubuntu0.2_powerpc.deb

Ubuntu freeradius_1.1.7-1ubuntu0.2_powerpc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius_1.1.7-1ubunt u0.2_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

Ubuntu freeradius-dbg_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-dbg_1.1.7-1u buntu0.2_sparc.deb

Ubuntu freeradius-dialupadmin_1.1.7-1ubuntu0.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-di alupadmin_1.1.7-1ubuntu0.2_all.deb

Ubuntu freeradius-iodbc_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-iodbc_1.1.7- 1ubuntu0.2_sparc.deb

Ubuntu freeradius-krb5_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-krb5_1.1.7-1 ubuntu0.2_sparc.deb

Ubuntu freeradius-ldap_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-ldap_1.1.7-1 ubuntu0.2_sparc.deb

Ubuntu freeradius-mysql_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-mysql_1.1.7- 1ubuntu0.2_sparc.deb

Ubuntu freeradius-postgresql_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-postgresql_1 .1.7-1ubuntu0.2_sparc.deb

Ubuntu freeradius_1.1.7-1ubuntu0.2_sparc.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius_1.1.7-1ubunt u0.2_sparc.deb

Mandriva Linux Mandrake 2008.0 x86_64

Mandriva freeradius-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-devel-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-krb5-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-ldap-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-mysql-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-postgresql-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-unixODBC-1.1.7-2.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

Ubuntu freeradius-dbg_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-db g_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius-dialupadmin_1.1.7-1ubuntu0.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-di alupadmin_1.1.7-1ubuntu0.2_all.deb

Ubuntu freeradius-iodbc_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-io dbc_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius-krb5_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-kr b5_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius-ldap_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-ld ap_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius-mysql_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-my sql_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius-postgresql_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-po stgresql_1.1.7-1ubuntu0.2_amd64.deb

Ubuntu freeradius_1.1.7-1ubuntu0.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius_1. 1.7-1ubuntu0.2_amd64.deb

Mandriva Linux Mandrake 2008.0

Mandriva freeradius-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-devel-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-krb5-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-ldap-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-mysql-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-postgresql-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-unixODBC-1.1.7-2.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu freeradius-dbg_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-dbg_1.1.7-1u buntu0.2_lpia.deb

Ubuntu freeradius-dialupadmin_1.1.7-1ubuntu0.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-di alupadmin_1.1.7-1ubuntu0.2_all.deb

Ubuntu freeradius-iodbc_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-iodbc_1.1.7- 1ubuntu0.2_lpia.deb

Ubuntu freeradius-krb5_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-krb5_1.1.7-1 ubuntu0.2_lpia.deb

Ubuntu freeradius-ldap_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-ldap_1.1.7-1 ubuntu0.2_lpia.deb

Ubuntu freeradius-mysql_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-mysql_1.1.7- 1ubuntu0.2_lpia.deb

Ubuntu freeradius-postgresql_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius-postgresql_1 .1.7-1ubuntu0.2_lpia.deb

Ubuntu freeradius_1.1.7-1ubuntu0.2_lpia.deb
http://ports.ubuntu.com/pool/main/f/freeradius/freeradius_1.1.7-1ubunt u0.2_lpia.deb

MandrakeSoft Corporate Server 4.0

Mandriva freeradius-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-devel-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-krb5-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-ldap-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-mysql-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-postgresql-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreeradius1-unixODBC-1.0.4-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu freeradius-dbg_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-db g_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius-dialupadmin_1.1.7-1ubuntu0.2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-di alupadmin_1.1.7-1ubuntu0.2_all.deb

Ubuntu freeradius-iodbc_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-io dbc_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius-krb5_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-kr b5_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius-ldap_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-ld ap_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius-mysql_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-my sql_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius-postgresql_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius-po stgresql_1.1.7-1ubuntu0.2_i386.deb

Ubuntu freeradius_1.1.7-1ubuntu0.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freeradius/freeradius_1. 1.7-1ubuntu0.2_i386.deb

Apple Mac OS X Server 10.5.8

Apple SecUpdSrvr2009-006.dmg
For Mac OS X Server v10.5.8
http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.8

Apple SecUpd2009-006.dmg
For Mac OS X v10.5.8
http://www.apple.com/support/downloads/

MandrakeSoft Corporate Server 4.0 x86_64

Mandriva freeradius-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-devel-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-krb5-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-ldap-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-mysql-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-postgresql-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64freeradius1-unixODBC-1.0.4-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/