01 Record

CVE-2001-1377

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 5.42% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 92.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2002-06-11 04:00Z24 YR AGO
Last updated: 2024-08-08 04:51Z2 YR AGO
Reserved: 2002-06-11
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 4ccf38d90880bcee41c26463f0daab6ea23dceb7c33a436d2ad441659afa60b6

05 Affected products

VendorProductVersionsPlatforms

freeradiusfreeradiusNot specified—

gnuradiusNot specified—

icradiusicradiusNot specified—

livingstonradiusNot specified—

lucentradiusNot specified—

miquel_van_smoorenburg_cistronradiusNot specified—

openradiusopenradiusNot specified—

radiusclientradiusclientNot specified—

redhatpowertoolsNot specified—

xtradiusxtradiusNot specified—

yard_radiusyard_radiusNot specified—

yard_radius_projectyard_radiusNot specified—

06 References

www.redhat.comRHSA-2002:030http://www.redhat.com/support/errata/RHSA-2002-030.htmlvendor-advisoryx_refsource_REDHAT
www.iss.netradius-vendor-attribute-dos(8354)http://www.iss.net/security_center/static/8354.phpvdb-entryx_refsource_XF
www.kb.cert.orgVU#936683http://www.kb.cert.org/vuls/id/936683third-party-advisoryx_refsource_CERT-VN
marc.info20020305 SECURITY.NNOV: few vulnerabilities in multiple RADIUS implementationshttp://marc.info/?l=bugtraq&m=101537153021792&w=2mailing-listx_refsource_BUGTRAQ
archives.neohapsis.comSuSE-SA:2002:013http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.htmlvendor-advisoryx_refsource_SUSE
www.securityfocus.com4230http://www.securityfocus.com/bid/4230vdb-entryx_refsource_BID
distro.conectiva.com.brCLA-2002:466http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466vendor-advisoryx_refsource_CONECTIVA
www.cert.orgCA-2002-06http://www.cert.org/advisories/CA-2002-06.htmlthird-party-advisoryx_refsource_CERT
ftp.freebsd.orgFreeBSD-SN-02:02ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.ascvendor-advisoryx_refsource_FREEBSD