CVE-2001-1377

Published: Mar 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.

Affected (40)

Products: Freeradius: Freeradius · Gnu: Radius · Icradius: Icradius · +8 more

Show all products

Freeradius: Freeradius · Gnu: Radius · Icradius: Icradius · Livingston: Radius · Lucent: Radius · Miquel Van Smoorenburg Cistron: Radius · Openradius: Openradius · Radiusclient: Radiusclient · Xtradius: Xtradius · Yard Radius: Yard Radius · Yard Radius Project: Yard Radius

1 product

1 product

1 product

1 product

1 product

Miquel Van Smoorenburg Cistron

1 product

1 product

1 product

1 product

1 product

1 product

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 0.2
Freeradius Freeradius	Version 0.3
Gnu Radius	Version 0.92.1
Gnu Radius	Version 0.93
Gnu Radius	Version 0.94
Gnu Radius	Version 0.95
Icradius Icradius	Version 0.14
Icradius Icradius	Version 0.15
Icradius Icradius	Version 0.16
Icradius Icradius	Version 0.17
Icradius Icradius	Version 0.17b
Icradius Icradius	Version 0.18.1
Icradius Icradius	Version 0.18
Livingston Radius	Version 2.0.1
Livingston Radius	Version 2.0
Livingston Radius	Version 2.1
Lucent Radius	Version 2.0.1
Lucent Radius	Version 2.0
Lucent Radius	Version 2.1
Miquel Van Smoorenburg Cistron Radius	Version 1.6.1
Miquel Van Smoorenburg Cistron Radius	Version 1.6.2
Miquel Van Smoorenburg Cistron Radius	Version 1.6.3
Miquel Van Smoorenburg Cistron Radius	Version 1.6.4
Miquel Van Smoorenburg Cistron Radius	Version 1.6.5
Miquel Van Smoorenburg Cistron Radius	Version 1.6_.0
Openradius Openradius	Version 0.8
Openradius Openradius	Version 0.9.1
Openradius Openradius	Version 0.9.2
Openradius Openradius	Version 0.9.3
Openradius Openradius	Version 0.9
Radiusclient Radiusclient	Version 0.3.1
Xtradius Xtradius	Version 1.1_pre1
Xtradius Xtradius	Version 1.1_pre2
Yard Radius Yard Radius	Version 1.0.17
Yard Radius Yard Radius	Version 1.0.18
Yard Radius Yard Radius	Version 1.0.19
Yard Radius Yard Radius	Version 1.0_pre13
Yard Radius Yard Radius	Version 1.0_pre14
Yard Radius Yard Radius	Version 1.0_pre15
Yard Radius Project Yard Radius	Version 1.0.16