CVE-2009-2357

CRITICAL 10.0CVE-2009-2357 · Published 07/07/2009 · updated 16/06/2026

In short

CVE-2009-2357 is a CRITICAL (CVSS 10.0) vulnerability affecting tekradius (yasinkaplan).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tekradius yasinkaplan	`= 3.0`	No fix yet

Description

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.

References

nth-dimension.org.uk/utils/get.php
securityfocus.com/archive/1/504740/100/0/threaded
vupen.com/english/advisories/2009/1816

More vulnerabilities in tekradius

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free