Lucent Radius vulnerabilities

5 known vulnerabilities affecting lucent/radius.

Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH2MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2001-1376HIGHCVSS 7.5v2.0v2.0.1+1 more2002-03-04
CVE-2001-1376 [HIGH] CVE-2001-1376: Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote atta Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
nvd
CVE-2001-1377MEDIUMCVSS 5.0v2.0v2.0.1+1 more2002-03-04
CVE-2001-1377 [MEDIUM] CVE-2001-1377: Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific at Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
nvd
CVE-2001-0534CRITICALCVSS 10.0v2.1.22001-07-21
CVE-2001-0534 [CRITICAL] CVE-2001-0534: Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS all Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.
nvd
CVE-2001-1082MEDIUMCVSS 5.0v2.1.22001-07-13
CVE-2001-1082 [MEDIUM] CVE-2001-1082: Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
nvd
CVE-2001-1081HIGHCVSS 7.5v2.1.22001-07-06
CVE-2001-1081 [HIGH] CVE-2001-1081: Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
nvd