Secunia

A vulnerability has been reported in GNU Radius, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an input validation error within the "asn_decode_string()" function. This can be exploited to cause an integer overflow and thereby crash the radius daemon by sending a specially crafted SNMP datagram to a vulnerable system.

Successful exploitation requires that radiusd has been compiled with the "--enable-snmp" option (not default setting).

The vulnerability has been reported in versions 1.1 and 1.2.

Solution
The vulnerability has been fixed in maintenance release 1.2.94.
Further details available in Customer Area

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Original Advisory
http://www.idefense.com/application/poi/display?id=141&type=vulnerabilities

Deep Links
Links available in Customer Area