Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 07/09/2001 Updated: 19/12/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
merit aaa radius server 5.01
merit aaa radius server 3.8m

source: wwwsecurityfocuscom/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack The program allows users to specify a directory from which configuration files should be loaded at runtime A help file, 'rlmadminhelp', is loaded from this ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html http://www.securityfocus.com/bid/3302 https://exchange.xforce.ibmcloud.com/vulnerabilities/7096 https://nvd.nist.gov https://www.exploit-db.com/exploits/21101/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-1000

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect