Every CVE Search/ Get API key

CVE-2005-4744

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and...

6.4 MediumFix available

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Exploit likelihood

4.48%Down 3.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.4

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
CVE-2005-4744
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Updated
2026-11-02
CVE List No score

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
CVE-2005-4744
Updated
2026-11-02
EUVDEUVD-2005-4737 No score

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
EUVD-2005-4737
Updated
2026-11-03
GitHub AdvisoriesGHSA-5382-qx5c-8j6g No score

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and...

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
GHSA-5382-qx5c-8j6g
Updated
2026-11-02
OSV No score

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
CVE-2005-4744
Updated
2026-11-02
OSVDEBIAN-CVE-2005-4744 No score

Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS. Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues. Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.

Record
DEBIAN-CVE-2005-4744
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeradius
Debian:12
 before 1.0.5-1
1.0.5-1
freeradius
Debian:13
 before 1.0.5-1
1.0.5-1
freeradius
Debian:14
 before 1.0.5-1
1.0.5-1
freeradius
Debian:3.1
 before 1.0.2-4sarge1, plus listed versions
1.0.2-4
1.0.2-4sarge1
freeradius
Red Hat:enterprise_linux:3::as
 before 0:1.0.1-2.RHEL3.2
0:1.0.1-2.RHEL3.2
freeradius-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.0.1-2.RHEL3.2
0:1.0.1-2.RHEL3.2
freeradius
Red Hat:enterprise_linux:3::es
 before 0:1.0.1-2.RHEL3.2
0:1.0.1-2.RHEL3.2
freeradius-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.0.1-2.RHEL3.2
0:1.0.1-2.RHEL3.2
freeradius
Red Hat:enterprise_linux:4::as
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
Show 8 moreShow less
Affected packages
PackageAffectedFixed
freeradius-mysql
Red Hat:enterprise_linux:4::as
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-postgresql
Red Hat:enterprise_linux:4::as
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-unixODBC
Red Hat:enterprise_linux:4::as
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius
Red Hat:enterprise_linux:4::es
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-mysql
Red Hat:enterprise_linux:4::es
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-postgresql
Red Hat:enterprise_linux:4::es
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3
freeradius-unixODBC
Red Hat:enterprise_linux:4::es
 before 0:1.0.1-3.RHEL4.3
0:1.0.1-3.RHEL4.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4744 is a medium vulnerability (CVSS 6.4) in Freeradius, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.48%, the 91st percentile. Fixed in freeradius 1.0.5-1.

References

Show 23 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open