VulnerabilityModified
CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
LOW 2.1EPSS 0.85%
Does this matter?
Lower severity and a low EPSS score (0.85%). Track it; it rarely justifies an emergency change on its own.
Description
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.85% probability · 56th percentile
- CISA KEV
- Not listed
- Affected
- merit/aaa radius server
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/3302Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7096
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/3302Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7096
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.