possible remote system compromise in radiusd-cistron

2003-06-1313:25:00

lists.opensuse.org

0.034 Low

EPSS

Percentile

91.5%

JSON

The package radiusd-cistron is an implementation of the RADIUS protocol. Unfortunately the RADIUS server handles too large NAS numbers not correctly. This leads to overwriting internal memory of the server process and may be abused to gain remote access to the system the RADIUS server is running on.

OSVersionArchitecturePackageVersionFilename
openSUSE7.3i386radiusd-cistron< 1.6.4-182radiusd-cistron-1.6.4-182.i386.rpm
openSUSE7.3ppcradiusd-cistron< 1.6.4-108radiusd-cistron-1.6.4-108.ppc.rpm
openSUSE7.3sparcradiusd-cistron< 1.6.4-70radiusd-cistron-1.6.4-70.sparc.rpm
openSUSE8.0i386radiusd-cistron< 1.6.6-88radiusd-cistron-1.6.6-88.i386.rpm
openSUSE7.2i386radiusd-cistron< 1.6.4-182radiusd-cistron-1.6.4-182.i386.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	7.3	i386	radiusd-cistron	< 1.6.4-182	radiusd-cistron-1.6.4-182.i386.rpm
openSUSE	7.3	ppc	radiusd-cistron	< 1.6.4-108	radiusd-cistron-1.6.4-108.ppc.rpm
openSUSE	7.3	sparc	radiusd-cistron	< 1.6.4-70	radiusd-cistron-1.6.4-70.sparc.rpm
openSUSE	8.0	i386	radiusd-cistron	< 1.6.6-88	radiusd-cistron-1.6.6-88.i386.rpm
openSUSE	7.2	i386	radiusd-cistron	< 1.6.4-182	radiusd-cistron-1.6.4-182.i386.rpm

0.034 Low

EPSS

Percentile

91.5%

JSON

Related for SUSE-SA:2003:030