CVE-2003-0450

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196063Exploit, Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000664
http://www.debian.org/security/2003/dsa-321Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2003_030_radiusd_cistron.html
http://www.turbolinux.com/security/TLSA-2003-40.txtPatch, Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196063Exploit, Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000664
http://www.debian.org/security/2003/dsa-321Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2003_030_radiusd_cistron.html
http://www.turbolinux.com/security/TLSA-2003-40.txtPatch, Vendor Advisory

Timeline

Published: Aug 7, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-04514.6Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments.CVE-2003-04524.6Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment var CVE-2003-045310.0traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "ma CVE-2003-04547.2Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.CVE-2003-04554.6The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitr CVE-2003-04565.0VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist CVE-2003-04584.6Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20, allows local users to gain additional privilege CVE-2003-04595.0KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Re CVE-2003-04605.0The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are r CVE-2003-04612.1/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain CVE-2003-04621.2A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 CVE-2003-04644.6The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are u