Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2001-1377

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

Published

2002-03-04T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application freeradius freeradius 0.2 Yes
Application freeradius freeradius 0.3 Yes
Application gnu radius 0.92.1 Yes
Application gnu radius 0.93 Yes
Application gnu radius 0.94 Yes
Application gnu radius 0.95 Yes
Application icradius icradius 0.14 Yes
Application icradius icradius 0.15 Yes
Application icradius icradius 0.16 Yes
Application icradius icradius 0.17 Yes
Application icradius icradius 0.17b Yes
Application icradius icradius 0.18 Yes
Application icradius icradius 0.18.1 Yes
Application livingston radius 2.0 Yes
Application livingston radius 2.0.1 Yes
Application livingston radius 2.1 Yes
Application lucent radius 2.0 Yes
Application lucent radius 2.0.1 Yes
Application lucent radius 2.1 Yes
Application miquel_van_smoorenburg_cistron radius 1.6.1 Yes
Application miquel_van_smoorenburg_cistron radius 1.6.2 Yes
Application miquel_van_smoorenburg_cistron radius 1.6.3 Yes
Application miquel_van_smoorenburg_cistron radius 1.6.4 Yes
Application miquel_van_smoorenburg_cistron radius 1.6.5 Yes
Application miquel_van_smoorenburg_cistron radius 1.6_.0 Yes
Application openradius openradius 0.8 Yes
Application openradius openradius 0.9 Yes
Application openradius openradius 0.9.1 Yes
Application openradius openradius 0.9.2 Yes
Application openradius openradius 0.9.3 Yes
Application radiusclient radiusclient 0.3.1 Yes
Application xtradius xtradius 1.1_pre1 Yes
Application xtradius xtradius 1.1_pre2 Yes
Application yard_radius yard_radius 1.0.17 Yes
Application yard_radius yard_radius 1.0.18 Yes
Application yard_radius yard_radius 1.0.19 Yes
Application yard_radius yard_radius 1.0_pre13 Yes
Application yard_radius yard_radius 1.0_pre14 Yes
Application yard_radius yard_radius 1.0_pre15 Yes
Application yard_radius_project yard_radius 1.0.16 Yes
References