CVEvulnerability

CVE-2001-1376

7.5 HIGH Published 2002-03-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-03-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

Affected configurations

• ascend radius 1.16 • freeradius freeradius 0.2 • freeradius freeradius 0.3 • gnu radius 0.92.1 • gnu radius 0.93 • gnu radius 0.94 • gnu radius 0.95 • icradius icradius 0.14 • icradius icradius 0.15 • icradius icradius 0.16 • icradius icradius 0.17 • icradius icradius 0.17b • icradius icradius 0.18 • icradius icradius 0.18.1 • livingston radius 2.0 • livingston radius 2.0.1 • livingston radius 2.1 • lucent radius 2.0 • lucent radius 2.0.1 • lucent radius 2.1 • miquel van smoorenburg cistron radius 1.6.1 • miquel van smoorenburg cistron radius 1.6.2 • miquel van smoorenburg cistron radius 1.6.3 • miquel van smoorenburg cistron radius 1.6.4 • miquel van smoorenburg cistron radius 1.6.5 • miquel van smoorenburg cistron radius 1.6 .0 • openradius openradius 0.8 • openradius openradius 0.9 • openradius openradius 0.9.1 • openradius openradius 0.9.2 • openradius openradius 0.9.3 • radiusclient radiusclient 0.3.1 • xtradius xtradius 1.1 pre1 • yard radius yard radius 1.0.17 • yard radius yard radius 1.0.18 • yard radius yard radius 1.0.19 • yard radius yard radius 1.0 pre13 • yard radius yard radius 1.0 pre14 • yard radius yard radius 1.0 pre15 • yard radius project yard radius 1.0.16

References