SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freeradius | Freeradius | 1.0.2 (including) | 1.0.2 (including) |
| Red Hat Enterprise Linux 3 | RedHat | freeradius-0:1.0.1-1.1.RHEL3 | * |
| Red Hat Enterprise Linux 4 | RedHat | freeradius-0:1.0.1-3.RHEL4 | * |