CVE-2001-1377

MEDIUM · 5.0 CVSS Gepubliceerd: 04-03-2002

Beschrijving

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

Vendors

Freeradius Gnu Icradius Livingston Lucent Miquel Van Smoorenburg Cistron Openradius Radiusclient Xtradius Yard Radius Yard Radius Project

Affected products

Freeradius Radius Icradius Openradius Radiusclient Xtradius Yard Radius

References

ftp.freebsd.org
archives.neohapsis.com
distro.conectiva.com.br
marc.info
www.cert.org
www.iss.net
www.kb.cert.org
www.redhat.com
www.securityfocus.com