cisco secure access control server 3.0.1 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functi...

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1.1 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.0.1 Cisco Secure Access Control Server 3.0.3 Cisco Secure Access Control Server 3.3

7.5

CVSSv2

Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS prior to 3.1.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.

Cisco Secure Access Control Server 2.5 Cisco Secure Access Control Server 2.6 Cisco Secure Access Control Server 3.1.1 Cisco Secure Access Control Server 2.6.2 Cisco Secure Access Control Server 2.6.3 Cisco Secure Access Control Server 2.1 Cisco Secure Access Control Server 2.6.4 Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 2.3 Cisco Secure Access Control Server 2.4 Cisco Secure Access Control Server 3.0.1 Cisco Secure Access Control Server 3.0.3

7.5

CVSSv2

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote malicious users to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.0.1

1 EDB exploit

7.5

CVSSv2

Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and previous versions and 3.x up to and including 3.01 (build 40), allows remote malicious users to crash the CSADMIN module only (denial of service of admini...

Cisco Secure Access Control Server 3.0.1 Cisco Secure Access Control Server 2.6.4 Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 2.6 Cisco Secure Access Control Server 2.6.2 Cisco Secure Access Control Server 2.6.3

5

CVSSv2

The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and previous versions and 3.x up to and including 3.01 (build 40), allows remote malicious users to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in ...

Cisco Secure Access Control Server 2.6.2 Cisco Secure Access Control Server 2.6.3 Cisco Secure Access Control Server 2.6.4 Cisco Secure Access Control Server 2.6 Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.0.1

7.5

CVSSv2

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Cisco Secure Access Control Server 3.0.1

5

CVSSv2

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote malicious users to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard late...

1 EDB exploit

6.5

CVSSv2

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

3.5

CVSSv2

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...

Ntp Ntp Ntp Ntp 4.2.8

7.5

CVSSv2

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook