Synopsis

freeradius security update

Type/Severity

Security Advisory: Moderate

Topic

Updated freeradius packages that fix a buffer overflow and possible SQL
injection attacks in the sql module are now available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

FreeRADIUS is a high-performance and highly configurable free RADIUS server
designed to allow centralized authentication and authorization for a network.

A buffer overflow bug was found in the way FreeRADIUS escapes data in an
SQL query. An attacker may be able to crash FreeRADIUS if they cause
FreeRADIUS to escape a string containing three or less characters. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-1454 to this issue.

Additionally a bug was found in the way FreeRADIUS escapes SQL data. It is
possible that an authenticated user could execute arbitrary SQL queries by
sending a specially crafted request to FreeRADIUS. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-1455 to this issue.

Users of FreeRADIUS should update to these erratum packages, which contain
backported patches and are not vulnerable to these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 156941 - CAN-2005-1454 Multiple issues in freeradius (CAN-2005-1455)

CVEs

• CVE-2005-1454
• CVE-2005-1455

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
freeradius-1.0.1-3.RHEL4.src.rpm	SHA-256: f021680ee2794d88a38c0334bc509d88718e14860d6e29ae6cc59a5a76695c3f
x86_64
freeradius-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: a9643360fd7d2549d55e1b08909d1c307688ea7d4febb991747d5aef0f43a33d
freeradius-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: a9643360fd7d2549d55e1b08909d1c307688ea7d4febb991747d5aef0f43a33d
freeradius-mysql-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: 71d4bd35623cea9ffa223bece054b8e586f55090c52887252491f50e85d169e1
freeradius-mysql-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: 71d4bd35623cea9ffa223bece054b8e586f55090c52887252491f50e85d169e1
freeradius-postgresql-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: bbf4b274669130595ce72f10d64e45343da410a3799963952236543609b9e7cc
freeradius-postgresql-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: bbf4b274669130595ce72f10d64e45343da410a3799963952236543609b9e7cc
freeradius-unixODBC-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: 33daec6c8b4956b9536e90d6a894a726e578c5c299a2d72da2415477ec78549b
freeradius-unixODBC-1.0.1-3.RHEL4.x86_64.rpm	SHA-256: 33daec6c8b4956b9536e90d6a894a726e578c5c299a2d72da2415477ec78549b
ia64
freeradius-1.0.1-3.RHEL4.ia64.rpm	SHA-256: ae8c31f07dc378cf04ee5c72e50952d577999825a32b94870b0a64a897e43983
freeradius-1.0.1-3.RHEL4.ia64.rpm	SHA-256: ae8c31f07dc378cf04ee5c72e50952d577999825a32b94870b0a64a897e43983
freeradius-mysql-1.0.1-3.RHEL4.ia64.rpm	SHA-256: a23ae15eab7e09328f487b4ffb42ee3fe38f63c7e3a853e07afff2e78eac4512
freeradius-mysql-1.0.1-3.RHEL4.ia64.rpm	SHA-256: a23ae15eab7e09328f487b4ffb42ee3fe38f63c7e3a853e07afff2e78eac4512
freeradius-postgresql-1.0.1-3.RHEL4.ia64.rpm	SHA-256: 001a94278e55a6f638ae676322d23902cd0f719e8c60a2cf23734131598811ae
freeradius-postgresql-1.0.1-3.RHEL4.ia64.rpm	SHA-256: 001a94278e55a6f638ae676322d23902cd0f719e8c60a2cf23734131598811ae
freeradius-unixODBC-1.0.1-3.RHEL4.ia64.rpm	SHA-256: 9eacfefa9ed427aa77cc5dd7c2f83cbc56a8124e067a092e56ecef591da2d108
freeradius-unixODBC-1.0.1-3.RHEL4.ia64.rpm	SHA-256: 9eacfefa9ed427aa77cc5dd7c2f83cbc56a8124e067a092e56ecef591da2d108
i386
freeradius-1.0.1-3.RHEL4.i386.rpm	SHA-256: 5bf37e5b2c8855b84c91f2422e2c72bf952e43ae941d00c594c437c1e0c91b7d
freeradius-1.0.1-3.RHEL4.i386.rpm	SHA-256: 5bf37e5b2c8855b84c91f2422e2c72bf952e43ae941d00c594c437c1e0c91b7d
freeradius-mysql-1.0.1-3.RHEL4.i386.rpm	SHA-256: e0c7b627073848ab9c2c7632e3bc61131d9b8cf51dc76e768ddcb3a24eb52dc9
freeradius-mysql-1.0.1-3.RHEL4.i386.rpm	SHA-256: e0c7b627073848ab9c2c7632e3bc61131d9b8cf51dc76e768ddcb3a24eb52dc9
freeradius-postgresql-1.0.1-3.RHEL4.i386.rpm	SHA-256: b50b4cc8c99d79ca5671fd8e5b7f739d40759be0268b5435c5c7585c871a7d9d
freeradius-postgresql-1.0.1-3.RHEL4.i386.rpm	SHA-256: b50b4cc8c99d79ca5671fd8e5b7f739d40759be0268b5435c5c7585c871a7d9d
freeradius-unixODBC-1.0.1-3.RHEL4.i386.rpm	SHA-256: 3f54b452c62b500ffa876ce129a6b17f18bd8bf0734ed7c7b33059819ea7608d
freeradius-unixODBC-1.0.1-3.RHEL4.i386.rpm	SHA-256: 3f54b452c62b500ffa876ce129a6b17f18bd8bf0734ed7c7b33059819ea7608d

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
freeradius-1.0.1-3.RHEL4.src.rpm	SHA-256: f021680ee2794d88a38c0334bc509d88718e14860d6e29ae6cc59a5a76695c3f
s390x
freeradius-1.0.1-3.RHEL4.s390x.rpm	SHA-256: c37cafeec9d5d2d3212e317b640e69ef23104aa022c679882346497b3f8dbf65
freeradius-mysql-1.0.1-3.RHEL4.s390x.rpm	SHA-256: ccc77dffe0df732f920da8af989b32a8e6d17648693a27aab95439ac83ab381f
freeradius-postgresql-1.0.1-3.RHEL4.s390x.rpm	SHA-256: 45a8a4cd64ac732e54da1776d4522f074d3f9cc69356186ce0840c3ec02e629d
freeradius-unixODBC-1.0.1-3.RHEL4.s390x.rpm	SHA-256: 21a547e4538dd6add76d4b1131a3de61ce76d8868656e0b793bee7a25ea62f0a
s390
freeradius-1.0.1-3.RHEL4.s390.rpm	SHA-256: 4aab2aaf684c5407c033adaae7cced592f32acd7bffe36b2a20640cf74a35a65
freeradius-mysql-1.0.1-3.RHEL4.s390.rpm	SHA-256: 1b0f6ae32fa6e9f77ac2ae8fc108709103d95054f2bfb3edd9f94e694568c521
freeradius-postgresql-1.0.1-3.RHEL4.s390.rpm	SHA-256: 1304d5e532f5a55442d7fde40cd3833b03eb4694193e5b3b8513b25170cf740d
freeradius-unixODBC-1.0.1-3.RHEL4.s390.rpm	SHA-256: f0127537c5ae7bfe7b4f4026a989fbf6a7cfaa255c7e818b8bb1e1818a235a5d

Red Hat Enterprise Linux for Power, big endian 4

SRPM
freeradius-1.0.1-3.RHEL4.src.rpm	SHA-256: f021680ee2794d88a38c0334bc509d88718e14860d6e29ae6cc59a5a76695c3f
ppc
freeradius-1.0.1-3.RHEL4.ppc.rpm	SHA-256: 6038acd8620d2ecfbe260788ed610cb3d9b0f6fcb3da2110d5c23377e96d4f6b
freeradius-mysql-1.0.1-3.RHEL4.ppc.rpm	SHA-256: e0a9a9540818ff31194ac9d59d5d9ab22da217341ffd806d7859f0d2b55496be
freeradius-postgresql-1.0.1-3.RHEL4.ppc.rpm	SHA-256: 1bf81a6024fa9d373ccd20d6a1cb9e19c14651d0f269e778789e2b96041c9f54
freeradius-unixODBC-1.0.1-3.RHEL4.ppc.rpm	SHA-256: 99c1b5f9dba9b8bdcf4ec5ac55c324e225b3bef1039db6b71b305c2932ace81d