RSS   Vulnerabilities for 'Radius'   RSS

2002-03-04
 
CVE-2001-1377

CWE-Other
 

 
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

 
 
CVE-2001-1376

CWE-Other
 

 
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

 
2001-07-13
 
CVE-2001-1082

 

 
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.

 
2001-07-06
 
CVE-2001-1081

 

 
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.

 
2001-07-21
 
CVE-2001-0534

 

 
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.

 

 >>> Vendor: Lucent 17 Products
Ascend max router
Ascend pipeline router
Ascend tnt router
Ascend routers
Radius
Wavelan
Orinoco rg-1000
Orinoco
Vitalanalysis
Vitalevent
Vitalhelp
Vitalnet
Vitalsuite
Dslterminator
Access point service router 1500
Access point service router 300
Access point service router 600


Copyright 2024, cxsecurity.com

 

Back to Top