CVE-2004-0849 Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to caus...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU radius | = 0.92.1 | No fix listed |
| GNU radius | = 0.93 | No fix listed |
| GNU radius | = 0.94 | No fix listed |
| GNU radius | = 0.95 | No fix listed |
| GNU radius | = 0.96 | No fix listed |
| GNU radius | = 1.1 | No fix listed |
| GNU radius | = 1.2 | No fix listed |
References
- [Info-gnu-radius] 20040915 GNU Radius 1.2.94. mailing-list patch vendor-advisory
- 20040915 GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability patch third-party-advisory vendor-advisory
- radius-asndecodestring-bo(17391) vdb-entry