Unrated severityNVD Advisory· Published Jul 7, 2009· Updated Jun 16, 2026

CVE-2009-2357

Description

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.

Affected products

Yasinkaplan/Tekradius
cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*
TekRADIUS/TekRADIUSllm-fuzzy
Range: = 3.0

Patches

Vulnerability mechanics

References

www.nth-dimension.org.uk/utils/get.phpnvd
www.securityfocus.com/archive/1/504740/100/0/threadednvd
www.vupen.com/english/advisories/2009/1816nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000