GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
BID:11198
Info
GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11198 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0849 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | The discoverer of this vulnerability wishes to remain anonymous. |
| Vulnerable: |
GNU Radius 1.1 GNU Radius 0.96 GNU Radius 0.95 GNU Radius 0.94 GNU Radius 0.93 GNU Radius 0.92.1 GNU Radius 1.2 |
| Not Vulnerable: | |
Discussion
GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
GNU Radius is reported prone to a remote integer overrun vulnerability. When GNU Radius handles SNMP string lengths that contain a large unsigned number, a memory access violation will occur this will cause the affected service to crash.
A remote attacker may exploit this condition to cause the affected server to crash.
GNU Radius is reported prone to a remote integer overrun vulnerability. When GNU Radius handles SNMP string lengths that contain a large unsigned number, a memory access violation will occur this will cause the affected service to crash.
A remote attacker may exploit this condition to cause the affected server to crash.
Exploit / POC
GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
Solution:
It is reported that this vulnerability is addressed in the GNU Radius version 1.2.94 maintenance release. This download was not available at the time of writing, customers are advised to contact the vendor for further details regarding obtaining and applying an appropriate update.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that this vulnerability is addressed in the GNU Radius version 1.2.94 maintenance release. This download was not available at the time of writing, customers are advised to contact the vendor for further details regarding obtaining and applying an appropriate update.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
GNU Radius SNMP String Length Remote Denial Of Service Vulnerability
References:
References:
- GNU Homepage (GNU)
- Radius Homepage (GNU)
- iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overf ("customer service mailbox"