CVE-2005-1454
EPSS 0.76%
Description
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.
How to fix CVE-2005-1454
To remediate CVE-2005-1454, upgrade the affected package to a fixed version below.
- Debian/freeradius—upgrade to 1.0.2-4 or later
Is CVE-2005-1454 being exploited?
Low — EPSS is 0.8%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.0.2-4