Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cisco secure access control server 3.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-0561
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functi...
Cisco Secure Access Control Server 3.2
Cisco Secure Access Control Server 3.1.1
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 3.0.3
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.0
NA
CVE-2003-0210
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS prior to 3.1.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Cisco Secure Access Control Server 2.5
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 2.6.2
Cisco Secure Access Control Server 2.1
Cisco Secure Access Control Server 2.6.3
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 2.4
Cisco Secure Access Control Server 2.6.4
Cisco Secure Access Control Server 3.1.1
Cisco Secure Access Control Server 3.0.3
Cisco Secure Access Control Server 2.3
Cisco Secure Access Control Server 2.6
NA
CVE-2006-4098
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows prior to 4.1 and ACS Solution Engine prior to 4.1 allows remote malicious users to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Cisco Secure Access Control Server 3.2
Cisco Secure Access Control Server 3.2.2
Cisco Secure Access Control Server 3.3.2
Cisco Secure Access Control Server 4.0
Cisco Secure Access Control Server 3.3(1)
Cisco Secure Access Control Server 4.0.1
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.2(1.20)
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.3.1
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.2(3)
Cisco Secure Access Control Server 3.2.1
Cisco Secure Access Control Server 3.2(1)
Cisco Secure Access Control Server 3.2(2)
NA
CVE-2002-0938
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote malicious users to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 3.0
1 EDB exploit
NA
CVE-2002-0160
The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and previous versions and 3.x up to and including 3.01 (build 40), allows remote malicious users to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in ...
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 2.6.2
Cisco Secure Access Control Server 2.6.3
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 2.6.4
Cisco Secure Access Control Server 2.6
NA
CVE-2002-0159
Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and previous versions and 3.x up to and including 3.01 (build 40), allows remote malicious users to crash the CSADMIN module only (denial of service of admini...
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 2.6.2
Cisco Secure Access Control Server 2.6.3
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 2.6.4
Cisco Secure Access Control Server 2.6
NA
CVE-2004-1460
Cisco Secure Access Control Server (ACS) 3.2(3) and previous versions, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote malicious users to gain unauthorized access to AAA clients via a blank password.
Cisco Secure Access Control Server 3.2
Cisco Secure Acs Solution Engine
Cisco Secure Access Control Server 3.3(1)
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.2(3)
Cisco Secure Access Control Server 3.2(1)
Cisco Secure Access Control Server 3.2(2)
NA
CVE-2004-1461
Cisco Secure Access Control Server (ACS) 3.2(3) and previous versions spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote malicious users to bypass authentication by connecting to that port from the same ...
Cisco Secure Access Control Server 3.2
Cisco Secure Acs Solution Engine
Cisco Secure Access Control Server 3.3(1)
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.2(3)
Cisco Secure Access Control Server 3.2(1)
Cisco Secure Access Control Server 3.2(2)
NA
CVE-2004-1458
The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote malicious users to cause a denial of service (hang) via a flood of TCP connections to port 2002.
Cisco Secure Access Control Server 3.2
Cisco Secure Acs Solution Engine
Cisco Secure Access Control Server 3.3(1)
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.2(3)
Cisco Secure Access Control Server 3.2(1)
Cisco Secure Access Control Server 3.2(2)
NA
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote malicious users to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard late...
Cisco Secure Access Control Server 3.2
Cisco Mgx 8230 1.2.11
Cisco Mgx 8250 1.2.10
Cisco Secure Access Control Server 3.2.2
Cisco Personal Assistant 1.3(2)
Cisco Unity Server 2.2
Cisco Secure Access Control Server 2.4
Cisco Secure Access Control Server 3.1.1
Cisco Personal Assistant 1.3(4)
Cisco Unity Server 3.0
Cisco Secure Access Control Server 2.6.3
Cisco Interactive Voice Response
Cisco Secure Access Control Server 2.42
Cisco Call Manager 3.0
Cisco Call Manager 3.1(3a)
Cisco Secure Access Control Server 3.3.2
Cisco Unity Server 3.1
Cisco Call Manager 1.0
Cisco Unity Server 3.3
Cisco Personal Assistant 1.3(3)
Cisco Secure Access Control Server 2.1
Cisco Secure Access Control Server 3.3(1)
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »