CVE-2008-4474 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2008-4474 Interim 1 14 2025-11-05T06:12:19Z current 2021-05-30T12:44:07Z 2025-11-05T06:12:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2008-4474 freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, and (5) truncate_radacct. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NIK4BZT6YITEWB6IF5RJXCVSZQBMGCOT/#NIK4BZT6YITEWB6IF5RJXCVSZQBMGCOT E-Mail link for SUSE-SR:2008:028 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Tumbleweed freeradius-server freeradius-server-2.1.1-7.10.1 freeradius-server-2.1.1-7.16.7 freeradius-server-2.1.1-7.18.1 freeradius-server-2.1.1-7.7.19.77 freeradius-server-3.0.23-1.5 freeradius-server-3.2.5-160000.2.2 freeradius-server-devel-2.1.1-7.18.1 freeradius-server-devel-3.0.23-1.5 freeradius-server-devel-3.2.5-160000.2.2 freeradius-server-dialupadmin-2.1.1-7.16.7 freeradius-server-dialupadmin-2.1.1-7.18.1 freeradius-server-dialupadmin-2.1.1-7.7.19.77 freeradius-server-doc freeradius-server-doc-2.1.1-7.16.7 freeradius-server-doc-2.1.1-7.18.1 freeradius-server-doc-2.1.1-7.7.19.77 freeradius-server-doc-3.0.23-1.5 freeradius-server-doc-3.2.5-160000.2.2 freeradius-server-krb5 freeradius-server-krb5-3.0.23-1.5 freeradius-server-krb5-3.2.5-160000.2.2 freeradius-server-ldap freeradius-server-ldap-3.0.23-1.5 freeradius-server-ldap-3.2.5-160000.2.2 freeradius-server-ldap-schemas-3.0.23-1.5 freeradius-server-libs freeradius-server-libs-2.1.1-7.16.7 freeradius-server-libs-2.1.1-7.18.1 freeradius-server-libs-2.1.1-7.7.19.77 freeradius-server-libs-3.0.23-1.5 freeradius-server-libs-3.2.5-160000.2.2 freeradius-server-mysql freeradius-server-mysql-3.0.23-1.5 freeradius-server-mysql-3.2.5-160000.2.2 freeradius-server-perl freeradius-server-perl-3.0.23-1.5 freeradius-server-perl-3.2.5-160000.2.2 freeradius-server-postgresql freeradius-server-postgresql-3.0.23-1.5 freeradius-server-postgresql-3.2.5-160000.2.2 freeradius-server-python freeradius-server-python3-3.0.23-1.5 freeradius-server-python3-3.2.5-160000.2.2 freeradius-server-sqlite freeradius-server-sqlite-3.0.23-1.5 freeradius-server-sqlite-3.2.5-160000.2.2 freeradius-server-utils freeradius-server-utils-2.1.1-7.16.7 freeradius-server-utils-2.1.1-7.18.1 freeradius-server-utils-2.1.1-7.7.19.77 freeradius-server-utils-3.0.23-1.5 freeradius-server-utils-3.2.5-160000.2.2 freeradius-server-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP1 freeradius-server-dialupadmin-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP1 freeradius-server-doc-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP1 freeradius-server-libs-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP1 freeradius-server-utils-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP1 freeradius-server-2.1.1-7.10.1 as a component of SUSE Linux Enterprise Server 11 SP2 freeradius-server-dialupadmin-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP2 freeradius-server-doc-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP2 freeradius-server-libs-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP2 freeradius-server-utils-2.1.1-7.7.19.77 as a component of SUSE Linux Enterprise Server 11 SP2 freeradius-server-2.1.1-7.16.7 as a component of SUSE Linux Enterprise Server 11 SP3 freeradius-server-dialupadmin-2.1.1-7.16.7 as a component of SUSE Linux Enterprise Server 11 SP3 freeradius-server-doc-2.1.1-7.16.7 as a component of SUSE Linux Enterprise Server 11 SP3 freeradius-server-libs-2.1.1-7.16.7 as a component of SUSE Linux Enterprise Server 11 SP3 freeradius-server-utils-2.1.1-7.16.7 as a component of SUSE Linux Enterprise Server 11 SP3 freeradius-server-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 freeradius-server-dialupadmin-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 freeradius-server-doc-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 freeradius-server-libs-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 freeradius-server-utils-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 freeradius-server-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-devel-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-doc-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-krb5-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-ldap-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-libs-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-mysql-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-perl-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-postgresql-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-python3-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-sqlite-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-utils-3.2.5-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 freeradius-server-devel-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 freeradius-server-libs-2.1.1-7.18.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 freeradius-server-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-devel-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-doc-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-krb5-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-ldap-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-ldap-schemas-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-libs-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-mysql-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-perl-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-postgresql-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-python3-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-sqlite-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server-utils-3.0.23-1.5 as a component of openSUSE Tumbleweed freeradius-server as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-krb5 as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-ldap as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-libs as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-mysql as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-perl as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-postgresql as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-python as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-sqlite as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-server-utils as a component of SUSE Linux Enterprise Server 12 SP2-BCL freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, and (5) truncate_radacct. CVE-2008-4474 SUSE Linux Enterprise Server 11 SP1:freeradius-server-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP1:freeradius-server-dialupadmin-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP1:freeradius-server-doc-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP1:freeradius-server-libs-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP1:freeradius-server-utils-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP2:freeradius-server-2.1.1-7.10.1 SUSE Linux Enterprise Server 11 SP2:freeradius-server-dialupadmin-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP2:freeradius-server-doc-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP2:freeradius-server-libs-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP2:freeradius-server-utils-2.1.1-7.7.19.77 SUSE Linux Enterprise Server 11 SP3:freeradius-server-2.1.1-7.16.7 SUSE Linux Enterprise Server 11 SP3:freeradius-server-dialupadmin-2.1.1-7.16.7 SUSE Linux Enterprise Server 11 SP3:freeradius-server-doc-2.1.1-7.16.7 SUSE Linux Enterprise Server 11 SP3:freeradius-server-libs-2.1.1-7.16.7 SUSE Linux Enterprise Server 11 SP3:freeradius-server-utils-2.1.1-7.16.7 SUSE Linux Enterprise Server 11 SP4:freeradius-server-2.1.1-7.18.1 SUSE Linux Enterprise Server 11 SP4:freeradius-server-dialupadmin-2.1.1-7.18.1 SUSE Linux Enterprise Server 11 SP4:freeradius-server-doc-2.1.1-7.18.1 SUSE Linux Enterprise Server 11 SP4:freeradius-server-libs-2.1.1-7.18.1 SUSE Linux Enterprise Server 11 SP4:freeradius-server-utils-2.1.1-7.18.1 SUSE Linux Enterprise Server 16.0:freeradius-server-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-devel-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-doc-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-krb5-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-ldap-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-libs-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-mysql-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-perl-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-postgresql-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-python3-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-sqlite-3.2.5-160000.2.2 SUSE Linux Enterprise Server 16.0:freeradius-server-utils-3.2.5-160000.2.2 SUSE Linux Enterprise Software Development Kit 11 SP4:freeradius-server-devel-2.1.1-7.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:freeradius-server-libs-2.1.1-7.18.1 openSUSE Tumbleweed:freeradius-server-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-devel-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-doc-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-krb5-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-ldap-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-ldap-schemas-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-libs-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-mysql-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-perl-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-postgresql-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-python3-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-sqlite-3.0.23-1.5 openSUSE Tumbleweed:freeradius-server-utils-3.0.23-1.5 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C