CVE-2004-0576: Medium severity GNU radius vulnerability

Published Jun 30, 2004

Updated

The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.

Affected Software

1 affected component

GNU radius=1.1

Remediation

Patch Available

http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities

Event History

Jun 30, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0576?

CVE-2004-0576 is considered a moderate severity vulnerability due to its potential to cause a denial of service through server crashes.

How do I fix CVE-2004-0576?

To fix CVE-2004-0576, disable the SNMP option when compiling GNU Radius or upgrade to an unaffected version.

Who is affected by CVE-2004-0576?

CVE-2004-0576 affects systems running GNU Radius version 1.1 compiled with the -enable-snmp option.

What type of attack does CVE-2004-0576 involve?

CVE-2004-0576 involves a remote denial of service attack triggered by sending malformed SNMP messages.

What is the exploitability of CVE-2004-0576?

CVE-2004-0576 is exploitable by remote attackers who can send crafted SNMP messages to the vulnerable server.