CVE Database
/

CVE-2004-0960

Back to search

CVE-2004-0960

Published: Oct 20, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-200409-29
vendor-advisory
x_refsource_GENTOO
11222
vdb-entry
x_refsource_BID
freeradius-dos(17440)
vdb-entry
x_refsource_XF
VU#541574
third-party-advisory
x_refsource_CERT-VN
oval:org.mitre.oval:def:11023
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now