Vulnerabilities > CVE-2001-1376

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

miquel-van-smoorenburg-cistron

yard-radius-project

NVD

Published: 2002-03-04

Updated: 2024-11-20

Summary

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

Vulnerable Configurations

Part	Description	Count
Application	Yard_Radius Yard Radius Yard Radius 1.0_Pre15 Yard Radius Yard Radius 1.0.17 Yard Radius Yard Radius 1.0_Pre13 Yard Radius Yard Radius 1.0_Pre14 Yard Radius Yard Radius 1.0.18 Yard Radius Yard Radius 1.0.19	6
Application	Ascend Ascend Radius 1.16	1
Application	Lucent Lucent Radius 2.0 Lucent Radius 2.0.1 Lucent Radius 2.1	3
Application	Openradius Openradius Openradius 0.9 Openradius Openradius 0.9.3 Openradius Openradius 0.8 Openradius Openradius 0.9.2 Openradius Openradius 0.9.1	5
Application	Icradius Icradius Icradius 0.14 Icradius Icradius 0.15 Icradius Icradius 0.18 Icradius Icradius 0.18.1 Icradius Icradius 0.16 Icradius Icradius 0.17 Icradius Icradius 0.17B	7
Application	Gnu GNU Radius 0.93 GNU Radius 0.95 GNU Radius 0.94 GNU Radius 0.92.1	4
Application	Livingston Livingston Radius 2.0.1 Livingston Radius 2.0 Livingston Radius 2.1	3
Application	Miquel_Van_Smoorenburg_Cistron Miquel VAN Smoorenburg Cistron Radius 1.6.4 Miquel VAN Smoorenburg Cistron Radius 1.6.5 Miquel VAN Smoorenburg Cistron Radius 1.6_.0 Miquel VAN Smoorenburg Cistron Radius 1.6.2 Miquel VAN Smoorenburg Cistron Radius 1.6.3 Miquel VAN Smoorenburg Cistron Radius 1.6.1	6
Application	Xtradius Xtradius Xtradius 1.1_Pre1	1
Application	Freeradius Freeradius Freeradius 0.3 Freeradius Freeradius 0.2	2
Application	Radiusclient Radiusclient Radiusclient 0.3.1	1
Application	Yard_Radius_Project Yard Radius Project Yard Radius 1.0.16	1

Redhat

advisories

rhsa

id	RHSA-2002:030

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.