tocsin

Debian/freeradius: unknown

freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4)

Action: Upgrade freeradius to 2.0.4+dfsg-6 or later.

Affected

introducedfixedlast affected
02.0.4+dfsg-6-

Fixed versions

2.0.4+dfsg-6

Sources

published · modified · JSON