Vulnerability Report

CVE-2013-4147

Title: Yard Radius Project Yard Radius RCE

DoS

Proof Of Concept

PoC Available for CVE-2013-4147

CWE Category CWE-134

Published Date Aug 09, 2013

Modified Date Apr 29, 2026

Exploit Status Available

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

10.57%

Vulnerability Summary

CVE-2013-4147: Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) log_msg function in log.c or (2) version or (3) build_version function in version.c.

Impacted Vendors

yard_radius_project 1

Reference Links

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714612 http://cxsecurity.com/issue/WLB-2013070028 http://osvdb.org/95518 http://seclists.org/oss-sec/2013/q3/145 https://exchange.xforce.ibmcloud.com/vulnerabilities/85892 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714612 http://cxsecurity.com/issue/WLB-2013070028 http://osvdb.org/95518 http://seclists.org/oss-sec/2013/q3/145 https://exchange.xforce.ibmcloud.com/vulnerabilities/85892

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2013-4147 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/38672

View Code

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

August 09, 2013 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.