10
CVSSv2

CVE-2000-1054

Published: 11/12/2000 Updated: 10/10/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary commands via a large packet.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco secure access control server 2.4\\(2\\)

cisco secure access control server 2.1

cisco secure access control server 2.3\\(3\\)

Exploits

source: wwwsecurityfocuscom/bid/1705/info Depending on the data entered, CiscoSecure ACS for Windows NT can be made to crash or arbitrary code execution can be made possible if an unusually long packet is sent to port 2002 If the application were to crash due to an oversized packet, the CSadmin Module would automatically restart after o ...