CVE-2000-0321: Buffer Overflow
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
ICRadiusfrom your environment.If ICRadius is not required, uninstall/remove the ICRadius service from affected systems to eliminate exposure.
- Configuration
Enforce input validation to reject overly long user names at the application or at an upstream proxy/load‑balancer before they reach ICRadius. Configure a sensible maximum user-name length and reject requests exceeding it to prevent buffer-overflow attempts.
ICRadius username_length_validation = enforce maximum/validate input - Compensating control
Restrict network access to the ICRadius service to trusted hosts/networks (use firewall rules, VPN, or network ACLs). Place the service behind a WAF or proxy that can filter or block requests with abnormally long user names.
- Operational
If a denial-of-service has occurred, restart the affected service(s), collect and review logs for indicators of exploitation, and remediate affected hosts. Apply the input-validation or network restrictions above as a temporary mitigation until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0321?
CVE-2000-0321 has a high severity due to its ability to cause a denial of service through a buffer overflow.
How do I fix CVE-2000-0321?
To fix CVE-2000-0321, update IC Radius to a version beyond 0.14 or implement input validation to restrict username length.
Who is affected by CVE-2000-0321?
CVE-2000-0321 affects users of the IC Radius package version 0.14.
What type of vulnerability is CVE-2000-0321?
CVE-2000-0321 is a buffer overflow vulnerability that can be exploited by a remote attacker.
What are the consequences of exploiting CVE-2000-0321?
Exploiting CVE-2000-0321 can lead to a denial of service, affecting the availability of the IC Radius service.