CVE-2004-0131

Published: Mar 3, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.

Affected (1)

Products: Gnu: Radius

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Radius	Version 1.1

References (14)

http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz

Source: cve@mitre.org

http://secunia.com/advisories/10799

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/277396

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/3824

Source: cve@mitre.org

http://www.securityfocus.com/bid/9578

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15046

Source: cve@mitre.org

http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/10799

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/277396

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/3824

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9578

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15046

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.