CVE-2006-4181

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443Patch, Vendor Advisory
http://secunia.com/advisories/23087Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-17.xml
http://securitytracker.com/id?1017285Patch
http://www.securityfocus.com/bid/21303Patch
http://www.vupen.com/english/advisories/2006/4712
https://exchange.xforce.ibmcloud.com/vulnerabilities/30508
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=443Patch, Vendor Advisory
http://secunia.com/advisories/23087Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-17.xml
http://securitytracker.com/id?1017285Patch
http://www.securityfocus.com/bid/21303Patch
http://www.vupen.com/english/advisories/2006/4712
https://exchange.xforce.ibmcloud.com/vulnerabilities/30508

Timeline

Published: Nov 28, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-41827.5Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanni CVE-2006-41836.8Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-d CVE-2006-41844.9SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to byp CVE-2006-41854.9Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) vi CVE-2006-41862.1The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain CVE-2006-41872.1Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of servi CVE-2006-41885.0Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of s CVE-2006-41895.1Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[CVE-2006-41902.1Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a ..CVE-2006-41915.1Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execu CVE-2006-41925.1Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possi CVE-2006-41937.5Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute ar