CVE-2001-1376

high

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arb…

Vendor / product: Ascend — radius

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

CVSS

7.5

7.5 (CVSS v2.0)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity source: NVD CVSS v2.0 (nvd@nist.gov)

Timeline (UTC)

Published: 2002-03-04 05:00

Modified: 2026-11-12 00:10

NVD status: Modified

Last synced 2 hours ago

Verified against the source API 2026-11-12 00:12 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

ascend / radius 1.16

freeradius / freeradius 0.2, 0.3

gnu / radius 0.92.1, 0.93, 0.94, 0.95

icradius / icradius 0.14, 0.15, 0.16, 0.17, 0.17b, 0.18

livingston / radius 2.0, 2.0.1, 2.1

lucent / radius 2.0, 2.0.1, 2.1

miquel_van_smoorenburg_cistron / radius 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6_.0

openradius / openradius 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3

radiusclient / radiusclient 0.3.1

xtradius / xtradius 1.1_pre1

yard_radius / yard_radius 1.0.17, 1.0.18, 1.0.19, 1.0_pre13, 1.0_pre14, 1.0_pre15

yard_radius_project / yard_radius 1.0.16

Weakness classification (CWE)

NVD-CWE-Other

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: http://online.securityfocus.com/archive/1/239784

Vendor advisory: http://www.securityfocus.com/bid/3530

Vendor advisory: http://online.securityfocus.com/archive/1/239784

Vendor advisory: http://www.securityfocus.com/bid/3530

Patch / mitigation: http://www.cert.org/advisories/CA-2002-06.html

Patch / mitigation: http://www.securityfocus.com/bid/3530

Patch / mitigation: http://www.cert.org/advisories/CA-2002-06.html

Patch / mitigation: http://www.securityfocus.com/bid/3530

References

http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html cve@mitre.org
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 cve@mitre.org
http://marc.info/?l=bugtraq&m=101537153021792&w=2 cve@mitre.org
http://online.securityfocus.com/archive/1/239784 cve@mitre.org
http://www.cert.org/advisories/CA-2002-06.html cve@mitre.org
http://www.kb.cert.org/vuls/id/589523 cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2002-030.html cve@mitre.org
http://www.securityfocus.com/bid/3530 cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/7534 cve@mitre.org
http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html af854a3a-2127-422b-91ae-364da2661108
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=101537153021792&w=2 af854a3a-2127-422b-91ae-364da2661108
http://online.securityfocus.com/archive/1/239784 af854a3a-2127-422b-91ae-364da2661108
http://www.cert.org/advisories/CA-2002-06.html af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/589523 af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2002-030.html af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/3530 af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/7534 af854a3a-2127-422b-91ae-364da2661108

Data sources

NVD CVE API 2.0 — fetched 2026-11-12 00:12 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores