CVE Vulnerabilities

CVE-2004-0849

Published: Dec 23, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the –enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

Affected Software

Name Vendor Start Version End Version
Radius Gnu 0.92.1 0.92.1
Radius Gnu 0.93 0.93
Radius Gnu 0.94 0.94
Radius Gnu 0.95 0.95
Radius Gnu 0.96 0.96
Radius Gnu 1.1 1.1
Radius Gnu 1.2 1.2

References