CVE-2012-3816 : WinRadius Server 2009 allows remote attackers to cause a denial of service (cras

WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.

Published 2012-06-27 21:55:06

Updated 2017-08-29 01:32:06

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2012-3816

Winradius » Winradius » Version: 2009
cpe:2.3:h:winradius:winradius:2009:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

27.88%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

http://www.exploit-db.com/exploits/18945

WinRadius Server 2009 - Denial of Service - Windows dos Exploit
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/75890

WinRadius Access-Request denial of service CVE-2012-3816 Vulnerability Report
http://www.securityfocus.com/bid/53702

WinRadius Password Option Size Validation Buffer Overflow Vulnerability
http://archives.neohapsis.com/archives/bugtraq/2012-05/0135.html

Exploit

Jump to