cisco secure access control server 4.0 vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows prior to 4.1 and ACS Solution Engine prior to 4.1 allows remote malicious users to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2.2 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2\\(1.20\\)Cisco Secure Access Control Server 3.2\\(2\\)Cisco Secure Access Control Server 4.0 Cisco Secure Access Control Server 4.0.1 Cisco Secure Access Control Server 3.2\\(3\\)Cisco Secure Access Control Server 3.2.1 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.2\\(1\\)Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Access Control Server 3.3.1 Cisco Secure Access Control Server 3.3.2

7.5

CVSSv2

Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote malicious users to bypass authentication via various methods, aka...

Cisco Secure Access Control Server 4.0.1 Cisco Secure Access Control Server 4.0

7.5

CVSSv2

Cisco Secure ACS 3.x prior to 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x prior to 4.1(4) Build 13 Patch 11, and 4.2.x prior to 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows...

Cisco Secure Access Control Server Cisco Secure Acs

5

CVSSv2

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote malicious users to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard late...

1 EDB exploit

7.5

CVSSv2

Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows malicious users to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerE...

Microsoft Windows 2000 Microsoft Windows Nt 4.0 Microsoft Windows Xp

2 EDB exploits

3.5

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator...

7.5

CVSSv2

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...

Apache Commons Collections Apache Commons Collections 4.0

5 Github repositories

10

CVSSv2

Vulnerabilities in a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into m...

Snmp Snmp

10

CVSSv2

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote malicious users to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test...

Snmp Snmp

1 EDB exploit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook