FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.
References
Link | Resource |
---|---|
http://security.gentoo.org/glsa/glsa-200409-29.xml | Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/541574 | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/11222 | Patch Vendor Advisory |
http://www.osvdb.org/10178 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/17440 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837 |
Configurations
Information
Published : 2004-11-02 21:00
Updated : 2017-10-10 18:29
NVD link : CVE-2004-0938
Mitre link : CVE-2004-0938
JSON object : View
CWE
Products Affected
freeradius
- freeradius