low2.1Public exploit code
CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link2001-09-07 · local · unix · Verified
Impact
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Merit | Aaa Radius Server | Versions 3.8m, 5.01 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html
- http://www.securityfocus.com/bid/3302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7096
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html
- http://www.securityfocus.com/bid/3302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7096