CVE-2001-1000: Low severity Merit Aaa Radius Server vulnerability
Published Sep 7, 2001
·Updated
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
Affected Software
2 affected components
Merit Aaa Radius Server=5.01
Merit Aaa Radius Server=3.8m
Event History
Sep 7, 2001
CVE Published
04:00 AM
Feb 2, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1000?
CVE-2001-1000 is considered a moderate severity vulnerability due to its potential for local users to read arbitrary files.
2
How do I fix CVE-2001-1000?
To fix CVE-2001-1000, ensure that the rlmadmin help file is not accessible via symlink and apply any available patches for the affected Merit AAA Server versions.
3
Which versions are affected by CVE-2001-1000?
CVE-2001-1000 affects Merit AAA Server versions 3.8M and 5.01.
4
What type of attack is exploited by CVE-2001-1000?
CVE-2001-1000 is exploited using a symlink attack that allows local users to read unauthorized files.
5
Who is impacted by CVE-2001-1000?
Local users on systems running vulnerable versions of the Merit AAA Server are impacted by CVE-2001-1000.