Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Cistron RADIUS Remote Signed NAS-Port Number Expansion Memory Corruption Vulnerability

Solution:
Conectiva has released a security advisory (CLA-2003:664) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Fixes are listed below.

SuSE has released a security advisory (SuSE-SA:2003:030) containing fixes to address this issue. Users are advised to upgrade as soon as possible. Further information regarding how to obtain and apply fixes can be found in the attached advisory.

Cistron RADIUS 1.6.7 is currently under development and will address this issue.

Debian has released advisory DSA 321-1 with fixes to address this issue. See referenced advisory for additional information.

Gentoo has released fixes to address this issue. The associated advisory contains the following information:

It is recommended that all Gentoo Linux users who are running
net-dialup/cistronradius upgrade to cistronradius-1.6.6-r1 as follows

emerge sync
emerge cistronradius
emerge clean


Miquel van Smoorenburg Cistron Radius 1.6.4

Miquel van Smoorenburg Cistron Radius 1.6.6







 

Privacy Statement
Copyright 2008, SecurityFocus