PT-2001-2224 · Lucent · Livingston/Lucent Radius

Published 2001-07-06 · Updated 2008-09-05 · CVE-2001-1081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Livingston/Lucent RADIUS versions prior to 2.1.va.1

Description The issue allows local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.

Recommendations For versions prior to 2.1.va.1, update to version 2.1.va.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1081

Affected Products

Livingston/Lucent Radius

References · 5

• http://freshmeat.net/releases/52020 · Vendor Advisory
• http://securityfocus.com/bid/2994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1081 · Security Note
• http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0009.html · Note
• http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html · Note