← Database

CVE-2001-1377

MEDIUM CVSS: 5.0 Published: 2002-03-04 Modified: 2026-06-16

Description

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

Affected Platforms

Miquel Van Smoorenburg Cistron RadiusXtradius XtradiusLucent RadiusOpenradius OpenradiusLivingston RadiusYard Radius Project Yard RadiusRadiusclient RadiusclientYard Radius Yard RadiusFreeradius FreeradiusGnu Radius

Weakness Type

NVD-CWE-Other

References