CVE-2004-0849

Published: Dec 23, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

Affected (7)

Products: Gnu: Radius

Gnu

1 product

Radius

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Gnu Radius	Version 0.92.1
Gnu Radius	Version 0.93
Gnu Radius	Version 0.94
Gnu Radius	Version 0.95
Gnu Radius	Version 0.96
Gnu Radius	Version 1.1
Gnu Radius	Version 1.2