CVE-2001-1081 Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers tha...
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lucent radius | = 2.1.2 | No fix listed |
| simon horms radius | = 2.1_2 | No fix listed |
References
- [fm-news] 20010713 Newsletter for Friday, July 13th 2001 mailing-list
- 20010719 [VulnWatch] Changelog maddness (14 various broken apps) mailing-list
- freshmeat.net vendor-advisory
- 2994 patch vdb-entry vendor-advisory