CVE

Id
4181  
CVE No.
CVE-2001-1377  
Status
Candidate  
Description
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.  
Phase
Proposed (20020611)  
Votes
ACCEPT(5) Alderson, Cole, Cox, Frech, Green | NOOP(2) Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19638 4181 CVE-2001-1377 BUGTRAQ:20020305 SECURITY.NNOV: few vulnerabilities in multiple RADIUS implementations  View
19639 4181 CVE-2001-1377 URL:http://marc.info/?l=bugtraq&m=101537153021792&w=2  View
19640 4181 CVE-2001-1377 CERT-VN:VU#936683  View
19641 4181 CVE-2001-1377 URL:http://www.kb.cert.org/vuls/id/936683  View
19642 4181 CVE-2001-1377 CERT:CA-2002-06  View
19643 4181 CVE-2001-1377 URL:http://www.cert.org/advisories/CA-2002-06.html  View
19644 4181 CVE-2001-1377 FREEBSD:FreeBSD-SN-02:02  View
19645 4181 CVE-2001-1377 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc  View
19646 4181 CVE-2001-1377 REDHAT:RHSA-2002:030  View
19647 4181 CVE-2001-1377 URL:http://www.redhat.com/support/errata/RHSA-2002-030.html  View
19648 4181 CVE-2001-1377 SUSE:SuSE-SA:2002:013  View
19649 4181 CVE-2001-1377 URL:http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html  View
19650 4181 CVE-2001-1377 CONECTIVA:CLA-2002:466  View
19651 4181 CVE-2001-1377 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466  View
19652 4181 CVE-2001-1377 XF:radius-vendor-attribute-dos(8354)  View
19653 4181 CVE-2001-1377 URL:http://www.iss.net/security_center/static/8354.php  View
19654 4181 CVE-2001-1377 BID:4230  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63715 JVNDB-2002-000042 複数ベンダ製品の RADIUS におけるメッセージダイジェスト計算によるバッファオーバーフローの脆弱性 Cistron RADIUS には、メッセージダイジェストを計算する際にバッファオーバーフローが生じる脆弱性が存在します。 CVE-2001-1377 4181 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000042.html  View