CVE-2001-1377
mediumMultiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of…
Vendor / product: Freeradius — freeradius
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
CVSS
5.0
5.0 (CVSS v2.0)
AV:N/AC:L/Au:N/C:N/I:N/A:P Severity source: NVD CVSS v2.0 (nvd@nist.gov)
Timeline (UTC)
Published: 2002-03-04 05:00
Modified: 2026-11-12 00:10
NVD status: Modified
Last synced 2 hours ago
Verified against the source API 2026-11-12 00:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
freeradius / freeradius 0.2, 0.3
gnu / radius 0.92.1, 0.93, 0.94, 0.95
icradius / icradius 0.14, 0.15, 0.16, 0.17, 0.17b, 0.18
livingston / radius 2.0, 2.0.1, 2.1
lucent / radius 2.0, 2.0.1, 2.1
miquel_van_smoorenburg_cistron / radius 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6_.0
openradius / openradius 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
radiusclient / radiusclient 0.3.1
xtradius / xtradius 1.1_pre1, 1.1_pre2
yard_radius / yard_radius 1.0.17, 1.0.18, 1.0.19, 1.0_pre13, 1.0_pre14, 1.0_pre15
yard_radius_project / yard_radius 1.0.16
Weakness classification (CWE)
NVD-CWE-Other
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: http://www.iss.net/security_center/static/8354.php
Vendor advisory: http://www.securityfocus.com/bid/4230
Vendor advisory: http://www.iss.net/security_center/static/8354.php
Vendor advisory: http://www.securityfocus.com/bid/4230
Patch / mitigation: http://www.cert.org/advisories/CA-2002-06.html
Patch / mitigation: http://www.iss.net/security_center/static/8354.php
Patch / mitigation: http://www.kb.cert.org/vuls/id/936683
Patch / mitigation: http://www.securityfocus.com/bid/4230
Patch / mitigation: http://www.cert.org/advisories/CA-2002-06.html
Patch / mitigation: http://www.iss.net/security_center/static/8354.php
Patch / mitigation: http://www.kb.cert.org/vuls/id/936683
Patch / mitigation: http://www.securityfocus.com/bid/4230
References
- http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html cve@mitre.org
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 cve@mitre.org
- http://marc.info/?l=bugtraq&m=101537153021792&w=2 cve@mitre.org
- http://www.cert.org/advisories/CA-2002-06.html cve@mitre.org
- http://www.iss.net/security_center/static/8354.php cve@mitre.org
- http://www.kb.cert.org/vuls/id/936683 cve@mitre.org
- http://www.redhat.com/support/errata/RHSA-2002-030.html cve@mitre.org
- http://www.securityfocus.com/bid/4230 cve@mitre.org
- http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html af854a3a-2127-422b-91ae-364da2661108
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 af854a3a-2127-422b-91ae-364da2661108
- http://marc.info/?l=bugtraq&m=101537153021792&w=2 af854a3a-2127-422b-91ae-364da2661108
- http://www.cert.org/advisories/CA-2002-06.html af854a3a-2127-422b-91ae-364da2661108
- http://www.iss.net/security_center/static/8354.php af854a3a-2127-422b-91ae-364da2661108
- http://www.kb.cert.org/vuls/id/936683 af854a3a-2127-422b-91ae-364da2661108
- http://www.redhat.com/support/errata/RHSA-2002-030.html af854a3a-2127-422b-91ae-364da2661108
- http://www.securityfocus.com/bid/4230 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-12 00:12 UTC · record ↗