CVE-2009-3111

FreeRadius < 1.1.8 - Zero-Length Tunnel-Password Denial of Service

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to CVE-2003-0967.

La función rad_decode FreeRADIUS anterior a v1.1.8, permite a atacantes remotos provocar una denegación de servicio (caída de radiusd) a través de los atributos zero-length Tunnel-Password. NOTA: esto es una regresión al error relacionado con el CVE-2003-0967.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-09-09 CVE Reserved
2009-09-09 CVE Published
2009-09-11 First Exploit
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (16)

URL	Tag	Source
http://intevydis.com/vd-list.shtml	X_refsource_misc
http://secunia.com/advisories/36509	Third Party Advisory
http://support.apple.com/kb/HT3937	X_refsource_confirm
http://www.securityfocus.com/bid/36263	Vdb Entry
http://www.vupen.com/english/advisories/2009/3184	Vdb Entry
https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html	Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/9642	2009-09-11

URL	Date	SRC
http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4	2017-09-19
http://www.openwall.com/lists/oss-security/2009/09/09/1	2017-09-19

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html	2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html	2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	2017-09-19
http://www.redhat.com/support/errata/RHSA-2009-1451.html	2017-09-19
https://access.redhat.com/security/cve/CVE-2009-3111	2009-09-17
https://bugzilla.redhat.com/show_bug.cgi?id=521912	2009-09-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				<= 1.1.7 Search vendor "Freeradius" for product "Freeradius" and version " <= 1.1.7"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.2 Search vendor "Freeradius" for product "Freeradius" and version "0.2"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.3 Search vendor "Freeradius" for product "Freeradius" and version "0.3"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.4 Search vendor "Freeradius" for product "Freeradius" and version "0.4"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.5 Search vendor "Freeradius" for product "Freeradius" and version "0.5"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.8 Search vendor "Freeradius" for product "Freeradius" and version "0.8"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.8.1 Search vendor "Freeradius" for product "Freeradius" and version "0.8.1"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.9 Search vendor "Freeradius" for product "Freeradius" and version "0.9"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.9.1 Search vendor "Freeradius" for product "Freeradius" and version "0.9.1"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.9.2 Search vendor "Freeradius" for product "Freeradius" and version "0.9.2"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				0.9.3 Search vendor "Freeradius" for product "Freeradius" and version "0.9.3"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.0 Search vendor "Freeradius" for product "Freeradius" and version "1.0.0"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.1 Search vendor "Freeradius" for product "Freeradius" and version "1.0.1"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.2 Search vendor "Freeradius" for product "Freeradius" and version "1.0.2"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.3 Search vendor "Freeradius" for product "Freeradius" and version "1.0.3"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.4 Search vendor "Freeradius" for product "Freeradius" and version "1.0.4"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.0.5 Search vendor "Freeradius" for product "Freeradius" and version "1.0.5"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.1.0 Search vendor "Freeradius" for product "Freeradius" and version "1.1.0"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.1.3 Search vendor "Freeradius" for product "Freeradius" and version "1.1.3"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.1.5 Search vendor "Freeradius" for product "Freeradius" and version "1.1.5"		-		Affected
Freeradius Search vendor "Freeradius"		Freeradius Search vendor "Freeradius" for product "Freeradius"				1.1.6 Search vendor "Freeradius" for product "Freeradius" and version "1.1.6"		-		Affected