NetSight
high7.5

CVE-2001-1376

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arb…

Impact

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

Affected products

VendorProductAffected versions
AscendRadius
Version 1.16
FreeradiusFreeradius
Versions 0.2, 0.3
GnuRadius
Versions 0.92.1, 0.93, 0.94, 0.95
IcradiusIcradius
Versions 0.14, 0.15, 0.16, 0.17, 0.17b, 0.18
LivingstonRadius
Versions 2.0, 2.0.1, 2.1
LucentRadius
Versions 2.0, 2.0.1, 2.1
Miquel Van Smoorenburg CistronRadius
Versions 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6_.0
OpenradiusOpenradius
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
RadiusclientRadiusclient
Version 0.3.1
XtradiusXtradius
Version 1.1_pre1
Yard RadiusYard Radius
Versions 1.0.17, 1.0.18, 1.0.19, 1.0_pre13, 1.0_pre14, 1.0_pre15
Yard Radius ProjectYard Radius
Version 1.0.16

References