CVE-1999-0244: Buffer Overflow
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Livingston RADIUSfrom your environment.Uninstall the Livingston RADIUS software if it is not required.
- Configuration
Stop and disable the Livingston RADIUS service until a vendor-supplied fix is available.
Livingston RADIUS service_enabled = false - Compensating control
Restrict network access to hosts running Livingston RADIUS to trusted management networks or specific trusted IP addresses using firewall rules or ACLs until a patch is available.
- Operational
Assume possible compromise due to remote root execution: isolate affected hosts, perform forensic investigation/rebuild as needed, and rotate any credentials, keys, or secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0244?
CVE-1999-0244 is considered a critical vulnerability due to its potential for remote command execution as root.
How do I fix CVE-1999-0244?
To remediate CVE-1999-0244, update Livingston RADIUS to a patched version that resolves the buffer overflow issue.
What software is affected by CVE-1999-0244?
CVE-1999-0244 affects Livingston RADIUS version 1.x.
Can CVE-1999-0244 be exploited remotely?
Yes, CVE-1999-0244 can be exploited remotely, allowing attackers to execute commands with root privileges.
What are the potential impacts of CVE-1999-0244?
The potential impacts of CVE-1999-0244 include unauthorized access, system compromise, and loss of system integrity.