CVE-2005-4744: freeradius
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2005-4744 is a medium (CVSS 6.4) vulnerability in freeradius. EPSS estimates a 4.48% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 28-03-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.48%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.48% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- freeradius< 1.0.5-1
Freeradius1 product
- freeradius1.0.3 | 1.0.4
2 vendors · 2 products
References
15 links- www.freeradius.org/security/20050909-response-to-suse.txtX Refsource CONFIRM
- www.freeradius.org/security/20050909-vendor-sec.txtX Refsource MISC
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10449VDB EntrySignatureX Refsource OVAL
Show all 15 references
- bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167676X Refsource MISC