Unscored severity · published Jul 6, 2001
CVE-2001-1081
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Radius · Lucent
2.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1081
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1081
archives.neohapsis.com
http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0009.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html
Vendor Advisory
http://freshmeat.net/releases/52020/
Patch
http://www.securityfocus.com/bid/2994
More from Radius
–
CVE-2001-1376
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via…
–
CVE-2001-1377
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via…
–
CVE-2001-0534
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands
–
CVE-2001-1082
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a