modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade freeradius2-utilsUpgrade freeradius2-krb5Upgrade freeradius2-unixODBCUpgrade freeradius2Upgrade freeradius2-perlUpgrade freeradius2-postgresqlUpgrade freeradius2-pythonUpgrade freeradius2-ldapUpgrade freeradius2-mysql | Dec 1, 2016 | Mar 12, 2013 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Mar 12, 2013 |
| Oracle_linux | — | Upgrade freeradius2-mysqlUpgrade freeradius2Upgrade freeradius2-ldapUpgrade freeradius2-utilsUpgrade freeradius2-postgresqlUpgrade freeradius2-pythonUpgrade freeradius2-krb5Upgrade freeradius2-perlUpgrade freeradius2-unixODBC | Oct 16, 2024 | Mar 12, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 14, 2011 |
| Suse | — | Upgrade freeradius-server-docUpgrade freeradius-server-develUpgrade freeradius-server-utilsUpgrade freeradius-serverUpgrade freeradius-server-libsUpgrade freeradius-server-dialupadmin | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade freeradius | Nov 8, 2024 | Mar 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub