CVEvulnerability

CVE-2001-1377

5.0 MEDIUM Published 2002-03-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-03-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

Affected configurations

• freeradius freeradius 0.2 • freeradius freeradius 0.3 • gnu radius 0.92.1 • gnu radius 0.93 • gnu radius 0.94 • gnu radius 0.95 • icradius icradius 0.14 • icradius icradius 0.15 • icradius icradius 0.16 • icradius icradius 0.17 • icradius icradius 0.17b • icradius icradius 0.18 • icradius icradius 0.18.1 • livingston radius 2.0 • livingston radius 2.0.1 • livingston radius 2.1 • lucent radius 2.0 • lucent radius 2.0.1 • lucent radius 2.1 • miquel van smoorenburg cistron radius 1.6.1 • miquel van smoorenburg cistron radius 1.6.2 • miquel van smoorenburg cistron radius 1.6.3 • miquel van smoorenburg cistron radius 1.6.4 • miquel van smoorenburg cistron radius 1.6.5 • miquel van smoorenburg cistron radius 1.6 .0 • openradius openradius 0.8 • openradius openradius 0.9 • openradius openradius 0.9.1 • openradius openradius 0.9.2 • openradius openradius 0.9.3 • radiusclient radiusclient 0.3.1 • xtradius xtradius 1.1 pre1 • xtradius xtradius 1.1 pre2 • yard radius yard radius 1.0.17 • yard radius yard radius 1.0.18 • yard radius yard radius 1.0.19 • yard radius yard radius 1.0 pre13 • yard radius yard radius 1.0 pre14 • yard radius yard radius 1.0 pre15 • yard radius project yard radius 1.0.16

References