CVE-2001-1000: Merit Aaa Radius Server

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.

Affected products

• Merit Aaa Radius Server: version 3.8m only; version 5.01 only

Published 2001-09-07. Last modified 2026-06-16.