CVE-2007-0105

Опубликовано: 09 янв. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.

Ссылки

http://secunia.com/advisories/23629
Patch
Vendor Advisory
http://securitytracker.com/id?1017475
http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
Vendor Advisory
http://www.kb.cert.org/vuls/id/744249
US Government Resource
http://www.osvdb.org/32642
http://www.securityfocus.com/bid/21900
http://www.vupen.com/english/advisories/2007/0068
https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
http://secunia.com/advisories/23629
Patch
Vendor Advisory
http://securitytracker.com/id?1017475
http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
Vendor Advisory
http://www.kb.cert.org/vuls/id/744249
US Government Resource
http://www.osvdb.org/32642
http://www.securityfocus.com/bid/21900
http://www.vupen.com/english/advisories/2007/0068
https://exchange.xforce.ibmcloud.com/vulnerabilities/31323

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*

Версия до 4.0.1 (включая)

EPSS

Процентиль: 83%

0.01884

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-p9mq-8p7x-v7f2

github

почти 4 года назад