Every CVESearch/Get API key

CVE-2011-4966

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user...

6.0 MediumFix available

CVE-2011-4966 is a medium vulnerability (CVSS 6.0) in Freeradius, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. Fixed in freeradius 2.1.12+dfsg-1.2.

What does this mean?
Severity
6.0 MediumCVSS 2.0, NVD
Exploit chance
1.38%EPSS, 72nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.1.12+dfsg-1.2freeradius +44 more

Description

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Exploit likelihood

1.38%Up 0.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeradius
Azure Linux:3
through 3.2.10-1None known
freeradius
Azure Linux:2
through 3.2.3-2None known
freeradius
Debian:12
before 2.1.12+dfsg-1.2
2.1.12+dfsg-1.2
freeradius
Debian:13
before 2.1.12+dfsg-1.2
2.1.12+dfsg-1.2
freeradius
Debian:14
before 2.1.12+dfsg-1.2
2.1.12+dfsg-1.2
freeradius
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-debuginfo
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-krb5
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-ldap
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-mysql
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
Show 35 moreShow less
Affected packages
PackageAffectedFixed
freeradius-perl
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-postgresql
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-python
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-unixODBC
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-utils
Red Hat:enterprise_linux:6::server
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-krb5
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-ldap
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-mysql
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-perl
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-postgresql
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-python
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-unixODBC
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius-utils
Red Hat:enterprise_linux:6::workstation
before 0:2.1.12-3.el6
0:2.1.12-3.el6
freeradius2
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-krb5
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-ldap
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-mysql
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-perl
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-postgresql
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-python
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-unixODBC
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-utils
Red Hat:enterprise_linux:5::client_workstation
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-debuginfo
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-krb5
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-ldap
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-mysql
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-perl
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-postgresql
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-python
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-unixODBC
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5
freeradius2-utils
Red Hat:enterprise_linux:5::server
before 0:2.1.12-5.el5
0:2.1.12-5.el5

What each source reports

NVD Score used6.0

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
CVE-2011-4966
CVSS 2.0
6.0 MediumAV:N/AC:M/Au:S/C:P/I:P/A:P
Weakness
CWE-255
Updated
2026-11-02
CVE ListNo score

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
CVE-2011-4966
Updated
2026-11-02
EUVDEUVD-2011-4872No score

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
EUVD-2011-4872
Updated
2026-11-03
GitHub AdvisoriesGHSA-3gjj-f2w8-w88qNo score

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user...

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
GHSA-3gjj-f2w8-w88q
Updated
2026-11-02
OSVAZL-112931No score

CVE-2011-4966 affecting package freeradius 3.2.10-1

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
AZL-112931
Updated
2026-11-10
OSVAZL-7231No score

CVE-2011-4966 affecting package freeradius 3.2.3-2

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
AZL-7231
Updated
2026-11-02
OSVNo score

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
CVE-2011-4966
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4966No score

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Record
DEBIAN-CVE-2011-4966
Updated
2026-11-02

History

History
RecordedChangedSources
affected, aliases, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 25 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open