cisco secure access control server 3.1 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functi...

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1.1 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.0.1 Cisco Secure Access Control Server 3.0.3 Cisco Secure Access Control Server 3.3

10

CVSSv2

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows prior to 4.1 and ACS Solution Engine prior to 4.1 allows remote malicious users to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2.2 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2\\(1.20\\)Cisco Secure Access Control Server 3.2\\(2\\)Cisco Secure Access Control Server 4.0 Cisco Secure Access Control Server 4.0.1 Cisco Secure Access Control Server 3.2\\(3\\)Cisco Secure Access Control Server 3.2.1 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.2\\(1\\)Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Access Control Server 3.3.1 Cisco Secure Access Control Server 3.3.2

7.5

CVSSv2

Cisco Secure Access Control Server (ACS) 3.2(3) and previous versions, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote malicious users to gain unauthorized access to AAA clients via a blank password.

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2 Cisco Secure Acs Solution Engine Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Access Control Server 3.2\\(1\\)Cisco Secure Access Control Server 3.2\\(2\\)Cisco Secure Access Control Server 3.2\\(3\\)

7.5

CVSSv2

Cisco Secure Access Control Server (ACS) 3.2(3) and previous versions spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote malicious users to bypass authentication by connecting to that port from the same ...

Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2\\(2\\)Cisco Secure Access Control Server 3.2\\(3\\)Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Acs Solution Engine Cisco Secure Access Control Server 3.2\\(1\\)

5

CVSSv2

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote malicious users to cause a denial of service (hang) via a flood of TCP connections to port 2002.

Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2\\(3\\)Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Acs Solution Engine Cisco Secure Access Control Server 3.2\\(1\\)Cisco Secure Access Control Server 3.2\\(2\\)

5

CVSSv2

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote malicious users to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard late...

1 EDB exploit

7.5

CVSSv2

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote malicious u...

Cisco Vpn 3001 Concentrator Cisco Vpn 3015 Concentrator Cisco Vpn 3020 Concentrator Cisco Vpn 3030 Concentator Cisco Vpn 3060 Concentrator Cisco Vpn 3080 Concentrator Cisco Adaptive Security Appliance Software 7.0 Cisco Adaptive Security Appliance Software 7.0\\(4\\)Cisco Adaptive Security Appliance Software 7.0.1.4 Cisco Adaptive Security Appliance Software 7.0.4.3 Cisco Vpn 3000 Concentrator Series Software 2.0 Cisco Vpn 3000 Concentrator Series Software 2.5.2.a Cisco Vpn 3000 Concentrator Series Software 2.5.2.b Cisco Vpn 3000 Concentrator Series Software 2.5.2.c Cisco Vpn 3000 Concentrator Series Software 2.5.2.d Cisco Vpn 3000 Concentrator Series Software 2.5.2.f Cisco Vpn 3000 Concentrator Series Software 3.0 Cisco Vpn 3000 Concentrator Series Software 3.0.3.a Cisco Vpn 3000 Concentrator Series Software 3.0.3.b Cisco Vpn 3000 Concentrator Series Software 3.0.4 Cisco Vpn 3000 Concentrator Series Software 3.1 Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)

10

CVSSv2

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test...

Snmp Snmp

1 EDB exploit

10

CVSSv2

Vulnerabilities in a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into m...

Snmp Snmp

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook