iDEFENSE Security Advisory 06.21.04: Remote exploitation of a denial of service condition within GNU Radius allows attackers to crash the service. The problem specifically exists in the code for handling SNMP messages. By supplying a malformed packet containing an invalid OID, such as -1, it is possible to cause the server to shutdown, preventing further requests from being handled. The Radius server must have been compiled with the ‘-enable-snmp’ option in order to be vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33605/06.21.04.txt
Source: https://packetstormsecurity.com/files/33605/iDEFENSE-Security-Advisory-2004-06-21.t.html

