CVE-2001-1000 rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
LowCVSS 2.1
EPSS 0.85%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merit aaa radius server | = 3.8m | No fix listed |
| merit aaa radius server | = 5.01 | No fix listed |
References
- 20010907 rlmadmin v3.8M view file symlink vulnerability exploit mailing-list vendor-advisory
- 3302 exploit vdb-entry vendor-advisory
- radius-rlmadmin-help-symlink(7096) vdb-entry