CVE-2001-1000

The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...

rlmadmin v3.8M view file symlink vulnerability

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Ministry-Of-Peace - Security Advisory 01 - 07th Sept 2001 rlmadmin v3.8M view file symlink vulnerability -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Overview: --------- rlmadmin is a user management...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from which configuration files should be loaded at runtime...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...