CVE-2004-0131 The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute w...
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU radius | = 1.1 | No fix listed |
References
- ftp.gnu.org
- 10799 third-party-advisory
- 20040204 GNU Radius Remote Denial of Service Vulnerability third-party-advisory
- VU#277396 third-party-advisory us-government-resource
- 3824 vdb-entry
- 9578 patch vdb-entry vendor-advisory
- radius-radprintrequest-dos(15046) vdb-entry