CVE-2006-4097

Опубликовано: 31 дек. 2006

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.

Ссылки

http://osvdb.org/36125
http://secunia.com/advisories/23629
Vendor Advisory
http://securitytracker.com/id?1017475
http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/443108
US Government Resource
http://www.securityfocus.com/bid/21900
http://www.vupen.com/english/advisories/2007/0068
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31334
http://osvdb.org/36125
http://secunia.com/advisories/23629
Vendor Advisory
http://securitytracker.com/id?1017475
http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/443108
US Government Resource
http://www.securityfocus.com/bid/21900
http://www.vupen.com/english/advisories/2007/0068
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31334

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*

Версия до 4.0 (включая)

cpe:2.3:a:cisco:secure_access_control_server:4.1:*:windows:*:*:*:*:*

EPSS

Процентиль: 83%

0.01827

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-7j4m-73mf-j53v

github

почти 4 года назад