CVE-2001-1377
MEDIUM
MEDIUM
Priority: 0.27
BB Relevance:
46/100
Published: 2002-03-04
Modified: 2026-11-12
First seen: 2026-11-12
Status: active
Attack Surface
Network
Low Complexity
CVSS Vector Breakdown
AV:
Network
AC:
Low
C:
None
I:
None
A:
P
Description
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
Affected Software (40)
| Vendor | Product | Version |
|---|---|---|
| freeradius | freeradius | 0.2 |
| freeradius | freeradius | 0.3 |
| gnu | radius | 0.92.1 |
| gnu | radius | 0.93 |
| gnu | radius | 0.94 |
| gnu | radius | 0.95 |
| icradius | icradius | 0.14 |
| icradius | icradius | 0.15 |
| icradius | icradius | 0.16 |
| icradius | icradius | 0.17 |
| icradius | icradius | 0.17b |
| icradius | icradius | 0.18 |
| icradius | icradius | 0.18.1 |
| livingston | radius | 2.0 |
| livingston | radius | 2.0.1 |
| livingston | radius | 2.1 |
| lucent | radius | 2.0 |
| lucent | radius | 2.0.1 |
| lucent | radius | 2.1 |
| miquel_van_smoorenburg_cistron | radius | 1.6.1 |
| miquel_van_smoorenburg_cistron | radius | 1.6.2 |
| miquel_van_smoorenburg_cistron | radius | 1.6.3 |
| miquel_van_smoorenburg_cistron | radius | 1.6.4 |
| miquel_van_smoorenburg_cistron | radius | 1.6.5 |
| miquel_van_smoorenburg_cistron | radius | 1.6_.0 |
| openradius | openradius | 0.8 |
| openradius | openradius | 0.9 |
| openradius | openradius | 0.9.1 |
| openradius | openradius | 0.9.2 |
| openradius | openradius | 0.9.3 |
Showing 30 of 40 entries
References & Advisories (9)
Patch
Vendor Advisory
Patch
Vendor Advisory
Patch
Third Party Advisory
US Government Resource
Patch
Third Party Advisory
US Government Resource