Vulnerabilities > CVE-2004-0131 - Remote Denial Of Service vulnerability in GNU Radius 1.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
gnu
NVD
Published: 2004-03-03
Updated: 2017-10-10

Summary

The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.

Vulnerable Configurations

Part Description Count
Application
Gnu
1

References