CVE-2004-0938

Опубликовано: 03 нояб. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

Ссылки

http://security.gentoo.org/glsa/glsa-200409-29.xml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/541574
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/10178
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11222
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17440
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347
http://security.gentoo.org/glsa/glsa-200409-29.xml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/541574
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/10178
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11222
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17440
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*

Версия до 1.0.1 (включая)

EPSS

Процентиль: 90%

0.05466

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0938

ubuntu

больше 20 лет назад

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

CVE-2004-0938

redhat

почти 21 год назад

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

CVE-2004-0938

debian

больше 20 лет назад

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of s ...

GHSA-3vc7-3jff-2j8g

github

около 3 лет назад

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

EPSS

Процентиль: 90%

0.05466

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other