Published: 29/11/2008 Updated: 11/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions prior to 5.1.44, Emerald 5.0.49 and other versions prior to 5.0.52, Air Marshal 2.0.4 and other versions prior to 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and previous versions, allows remote malicious users to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
iea software radiusx 5.1.38
iea software air marshal 2.0.5
iea software radlogin 4.0.20
iea software emerald 5.0.44
iea software emerald 5.0.42
iea software emerald 5.0.32
iea software emerald 5.0.31
iea software emerald 5.0.24
iea software air marshal 2.0.4
iea software air marshal 1.0.21
iea software air marshal 1.0.20
iea software air marshal 1.0.8
iea software air marshal 1.0.7
iea software radiusx 5.1.25
iea software radiusx 5.1.24
iea software radiusx 5.1.5
iea software radiusx 5.1.4
iea software radiusx 5.0.45
iea software radiusx 5.0.43
iea software radiusx 5.0.29
iea software radiusx 5.0.27
iea software radiusx 5.0.8b
iea software radiusx 5.0.7a
iea software radiusx 5.0.4a
iea software radiusx 4.0.30
iea software radiusx 4.0.29
iea software radiusx 4.0.20
iea software radiusx 4.0.17
iea software radiusx 4.0.8
iea software radiusx 4.0.7
iea software radiusx 3.0.191
iea software radiusx 3.0.190
iea software radiusx 3.0.182
iea software radiusx 3.0.179
iea software radiusx 3.0.171
iea software radiusnt 5.1.41
iea software radiusx 5.1.41
iea software radlogin 4.0.15
iea software emerald 5.0.49
iea software emerald 5.0.39
iea software emerald 5.0.37
iea software emerald 5.0.28
iea software emerald 5.0.27
iea software air marshal 2.0.0
iea software air marshal 2.0.0.b.7
iea software air marshal 1.0.16
iea software air marshal 1.0.15
iea software air marshal 1.0.11
iea software air marshal 1.0.4
iea software air marshal 1.0.3
iea software radiusx 5.1.16
iea software radiusx 5.1.15
iea software radiusx 5.0.55
iea software radiusx 5.0.54
iea software radiusx 5.0.38
iea software radiusx 5.0.36
iea software radiusx 5.0.15b
iea software radiusx 5.0.13b
iea software radiusx 4.0.34
iea software radiusx 4.0.33
iea software radiusx 4.0.26
iea software radiusx 4.0.24
iea software radiusx 4.0.13
iea software radiusx 4.0.12
iea software radiusx 4.0.3
iea software radiusx 4.0.2
iea software radiusx 3.0.186
iea software radiusx 3.0.185
iea software radiusx 3.0.176
iea software radiusx 3.0.175
iea software radiusx 3.0.158
iea software radiusx 3.0.154
iea software radiusx 4.0.41
iea software radiusx 4.0.43
iea software radiusx 4.0.56
iea software radiusx 4.0.57
iea software radiusx 4.0.59
iea software radiusx 4.0.70
iea software radiusx 4.0.71
iea software radiusx 4.0.79
iea software radiusnt 5.1.40
iea software radiusx 5.1.40
iea software radius test client 4.0.20
iea software radius test client 4.0.15
iea software emerald 5.0.41
iea software emerald 5.0.40
iea software emerald 5.0.30
iea software emerald 5.0.29
iea software air marshal 2.0.3
iea software air marshal 2.0.1
iea software air marshal 1.0.19
iea software air marshal 1.0.18
iea software air marshal 1.0.6
iea software air marshal 1.0.5
iea software radiusx 5.1.19
iea software radiusx 5.1.17
iea software radiusx 5.1.3
iea software radiusx 5.0.58
iea software radiusx 5.0.57
iea software radiusx 5.0.42
iea software radiusx 5.0.39
iea software radiusx 5.0.22
iea software radiusx 5.0.17
iea software radiusx 4.0.38
iea software radiusx 4.0.35
iea software radiusx 4.0.28
iea software radiusx 4.0.27
iea software radiusx 4.0.15
iea software radiusx 4.0.14
iea software radiusx 4.0.6
iea software radiusx 4.0.5
iea software radiusx 3.0.189
iea software radiusx 3.0.188
iea software radiusx 3.0.178
iea software radiusx 3.0.177
iea software radiusx 3.0.167
iea software radiusx 3.0.162
iea software radiusx 4.0.39
iea software radiusx 4.0.40
iea software radiusx 4.0.54
iea software radiusx 4.0.55
iea software radiusx 4.0.68
iea software radiusx 4.0.69
iea software radiusx 4.0.76
iea software radiusx 4.0.77
iea software radiusx 4.0.85
iea software radiusx 4.0.86
iea software radiusx 4.0.87
iea software radiusnt 4.0.84
iea software radiusnt 5.1.25
iea software radiusnt 5.1.16
iea software radiusnt 4.0.80
iea software radiusnt 5.1.4
iea software radiusnt 4.0.75
iea software radiusnt 5.0.54
iea software radiusnt 4.0.71
iea software radiusnt 4.0.68
iea software radiusnt 5.0.42
iea software radiusnt 5.0.35
iea software radiusnt 4.0.59
iea software radiusnt 4.0.54
iea software radiusnt 5.0.22
iea software radiusnt 5.0.10b
iea software radiusnt 4.0.44
iea software radiusnt 4.0.39
iea software radiusnt 4.0.38
iea software radiusnt 4.0.29
iea software radiusnt 4.0.28
iea software radiusnt 4.0.17
iea software radiusnt 4.0.15
iea software radiusnt 4.0.7
iea software radiusnt 4.0.6
iea software radiusnt 3.0.190
iea software radiusnt 3.0.189
iea software radiusnt 3.0.179
iea software radiusnt 3.0.178
iea software radiusnt 3.0.177
iea software radiusnt 3.0.168
iea software radiusnt 3.0.167
iea software radiusnt 3.0.145
iea software radiusnt
iea software radiusx 3.0.168
iea software radiusx 3.0.147
iea software radiusx 3.0.145
iea software radiusx 4.0.49
iea software radiusx 4.0.51
iea software radiusx 4.0.63
iea software radiusx 4.0.67
iea software radiusx 4.0.74
iea software radiusx 4.0.75
iea software radiusx 4.0.83
iea software radiusx 4.0.84
iea software radiusnt 5.1.35
iea software radiusnt 5.1.29
iea software radiusnt 5.1.17
iea software radiusnt 4.0.81
iea software radiusnt 4.0.77
iea software radiusnt 5.1.5
iea software radiusnt 4.0.76
iea software radiusnt 4.0.72
iea software radiusnt 5.0.55
iea software radiusnt 5.0.45
iea software radiusnt 5.0.43
iea software radiusnt 4.0.62
iea software radiusnt 4.0.60
iea software radiusnt 5.0.36
iea software radiusnt 5.0.27
iea software radiusnt 4.0.55
iea software radiusnt 5.0.13b
iea software radiusnt 4.0.47
iea software radiusnt 4.0.40
iea software radiusnt 5.0.4a
iea software radiusnt 4.0.31
iea software radiusnt 4.0.30
iea software radiusnt 4.0.21
iea software radiusnt 4.0.20
iea software radiusnt 4.09
iea software radiusnt 4.0.8
iea software radiusnt 4.0.193
iea software radiusnt 3.0.191
iea software radiusnt 3.0.183
iea software radiusnt 3.0.182
iea software radiusnt 3.0.172
iea software radiusnt 3.0.171
iea software radiusnt 3.0.149
iea software radiusnt 3.0.147
iea software emerald 5.0.50
iea software emerald 5.0.51
iea software emerald 5.0.48
iea software emerald 5.0.46
iea software emerald 5.0.36
iea software emerald 5.0.35
iea software emerald 5.0.33
iea software emerald 5.0.26
iea software emerald 5.0.25
iea software air marshal 2.0.0.b1
iea software air marshal 1.0.22
iea software air marshal 1.0.10
iea software air marshal 1.0.9
iea software radiusx 5.1.35
iea software radiusx 5.1.29
iea software radiusx 5.1.10
iea software radiusx 5.1.6
iea software radiusx 5.0.50
iea software radiusx 5.0.49
iea software radiusx 5.0.35
iea software radiusx 4.0.80
iea software radiusx 4.0.88
iea software radiusnt 4.0.86
iea software radiusnt 4.0.83
iea software radiusnt 5.1.24
iea software radiusnt 5.1.15
iea software radiusnt 5.1.10
iea software radiusnt 4.0.74
iea software radiusnt 5.1.3
iea software radiusnt 5.0.50
iea software radiusnt 4.0.70
iea software radiusnt 4.0.67
iea software radiusnt 5.0.39
iea software radiusnt 4.0.57
iea software radiusnt 4.0.56
iea software radiusnt 5.0.17
iea software radiusnt 4.0.51
iea software radiusnt 5.0.9b
iea software radiusnt 4.0.43
iea software radiusnt 4.0.35
iea software radiusnt 4.0.34
iea software radiusnt 4.0.27
iea software radiusnt 4.0.26
iea software radiusnt 4.0.14
iea software radiusnt 4.0.13
iea software radiusnt 4.0.12
iea software radiusnt 4.0.5
iea software radiusnt 4.0.3
iea software radiusnt 3.0.188
iea software radiusnt 3.0.186
iea software radiusnt 3.0.176
iea software radiusnt 3.0.175
iea software radiusnt 3.0.162
iea software radiusnt 3.0.158
iea software radiusx
iea software radiusx 5.0.31
iea software radiusx 5.0.10b
iea software radiusx 5.0.9b
iea software radiusx 4.0.32
iea software radiusx 4.0.31
iea software radiusx 4.0.23
iea software radiusx 4.0.21
iea software radiusx 4.0.11
iea software radiusx 4.0.10
iea software radiusx 4.0.9
iea software radiusx 4.0.1
iea software radiusx 4.0.193
iea software radiusx 3.0.184
iea software radiusx 3.0.183
iea software radiusx 3.0.174
iea software radiusx 3.0.173
iea software radiusx 3.0.172
iea software radiusx 3.0.150
iea software radiusx 3.0.149
iea software radiusx 4.0.44
iea software radiusx 4.0.47
iea software radiusx 4.0.60
iea software radiusx 4.0.62
iea software radiusx 4.0.72
iea software radiusx 4.0.73
iea software radiusx 4.0.81
iea software radiusx 4.0.82
iea software radiusnt 4.0.85
iea software radiusnt 5.1.38
iea software radiusnt 5.1.19
iea software radiusnt 4.0.82
iea software radiusnt 4.0.79
iea software radiusnt 5.1.6
iea software radiusnt 5.0.58
iea software radiusnt 4.0.73
iea software radiusnt 4.0.69
iea software radiusnt 5.0.49
iea software radiusnt 4.0.63
iea software radiusnt 5.0.38
iea software radiusnt 5.0.31
iea software radiusnt 5.0.29
iea software radiusnt 5.0.15b
iea software radiusnt 4.0.49
iea software radiusnt 5.0.8b
iea software radiusnt 4.0.41
iea software radiusnt 5.0.7a
iea software radiusnt 4.0.33
iea software radiusnt 4.0.32
iea software radiusnt 4.0.24
iea software radiusnt 4.0.23
iea software radiusnt 4.0.11
iea software radiusnt 4.0.10
iea software radiusnt 4.0.2
iea software radiusnt 4.0.1
iea software radiusnt 3.0.185
iea software radiusnt 3.0.184
iea software radiusnt 3.0.174
iea software radiusnt 3.0.173
iea software radiusnt 3.0.154
iea software radiusnt 3.0.150

source: wwwsecurityfocuscom/bid/27701/info Multiple IEA Software products are prone to a denial-of-service vulnerability Successfully exploiting this issue will allow attackers to crash the affected application, denying service to legitimate users This issue affects the following applications: - Emerald 5049 and prior versions - Ra ...

CWE-189 http://www.iea-software.com/docs/Radius40/changes.txt http://www.iea-software.com/docs/Emerald5/changes.txt http://secunia.com/advisories/28846 http://www.securityfocus.com/bid/27701 http://www.iea-software.com/docs/airmarshal1/changes.txt http://aluigi.altervista.org/adv/emerdal-adv.txt http://www.vupen.com/english/advisories/2008/0484 http://www.securityfocus.com/archive/1/487810/100/200/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31128/

Get Started

CVE-2008-5284

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect