CVE-2009-2357 | BDVDB-2026-37330 Detail

Description#

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2009/1816
http://www.securityfocus.com/archive/1/504740/100/0/threaded
http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56

Exploit#

No public exploit known

History#

Version 12009-07-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.