CVE-2001-1376
HIGH
MEDIUM
Priority: 0.64
BB Relevance:
52/100
Published: 2002-03-04
Modified: 2026-11-12
First seen: 2026-11-12
Status: active
Attack Surface
Network
Low Complexity
CVSS Vector Breakdown
AV:
Network
AC:
Low
C:
P
I:
P
A:
P
Description
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
Affected Software (40)
| Vendor | Product | Version |
|---|---|---|
| ascend | radius | 1.16 |
| freeradius | freeradius | 0.2 |
| freeradius | freeradius | 0.3 |
| gnu | radius | 0.92.1 |
| gnu | radius | 0.93 |
| gnu | radius | 0.94 |
| gnu | radius | 0.95 |
| icradius | icradius | 0.14 |
| icradius | icradius | 0.15 |
| icradius | icradius | 0.16 |
| icradius | icradius | 0.17 |
| icradius | icradius | 0.17b |
| icradius | icradius | 0.18 |
| icradius | icradius | 0.18.1 |
| livingston | radius | 2.0 |
| livingston | radius | 2.0.1 |
| livingston | radius | 2.1 |
| lucent | radius | 2.0 |
| lucent | radius | 2.0.1 |
| lucent | radius | 2.1 |
| miquel_van_smoorenburg_cistron | radius | 1.6.1 |
| miquel_van_smoorenburg_cistron | radius | 1.6.2 |
| miquel_van_smoorenburg_cistron | radius | 1.6.3 |
| miquel_van_smoorenburg_cistron | radius | 1.6.4 |
| miquel_van_smoorenburg_cistron | radius | 1.6.5 |
| miquel_van_smoorenburg_cistron | radius | 1.6_.0 |
| openradius | openradius | 0.8 |
| openradius | openradius | 0.9 |
| openradius | openradius | 0.9.1 |
| openradius | openradius | 0.9.2 |
Showing 30 of 40 entries
References & Advisories (9)
Vendor Advisory
US Government Resource
Patch
Vendor Advisory
Patch
Third Party Advisory
US Government Resource