Login Request a demo
Unscored severity · published Mar 3, 2004
CVE-2004-0131
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an…
–
CVSS
3.5%
EPSS
No
On KEV
Description
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Radius · Gnu
1.1 · source: NVD
Affected product
RA
Radius
Gnu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0131
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0131
ftp.gnu.org
http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz
secunia.com
http://secunia.com/advisories/10799
www.idefense.com
http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true
Third Party Advisory
http://www.kb.cert.org/vuls/id/277396
www.osvdb.org
http://www.osvdb.org/3824
Patch
http://www.securityfocus.com/bid/9578
More from Radius
–
CVE-2006-4181
Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown…
–
CVE-2004-0849
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows…
–
CVE-2004-0576
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP…
–
CVE-2001-1376
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via…
–
CVE-2001-1377
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via…