CVE-2001-1000 describes a local file disclosure vulnerability in the rlmadmin RADIUS management utility within Merit AAA Server versions 3.8M, 5.01, and potentially others. This flaw allows a local attacker to read arbitrary files on the system by exploiting a symlink attack on the rlmadmin.help file. Rated with a low CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), the vulnerability requires local access and has a low impact, primarily leading to information disclosure. While an ExploitDB entry (EDB-21101) exists detailing a symbolic link exploit, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.8mCPE matchmatch criteria | cpe:2.3:a:merit:aaa_radius_server:3.8m:*:*:*:*:*:*:* | ||
5.01CPE matchmatch criteria | cpe:2.3:a:merit:aaa_radius_server:5.01:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.