Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11556
Category:CISCO
Title:CISCO Secure ACS Management Interface Login Overflow
Summary:It may be possible to make this Cisco Secure ACS web; server(login.exe) execute arbitrary code by sending it a too long login url.
Description:Summary:
It may be possible to make this Cisco Secure ACS web
server(login.exe) execute arbitrary code by sending it a too long login url.

Solution:
Cisco has already released a patch for this problem.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: BugTraq ID: 7413
Common Vulnerability Exposure (CVE) ID: CVE-2003-0210
Bugtraq: 20030424 NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS (Google Search)
http://marc.info/?l=bugtraq&m=105120066126196&w=2
CERT/CC vulnerability note: VU#697049
http://www.kb.cert.org/vuls/id/697049
Cisco Security Advisory: 20030423 Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20030423-ACS.shtml
http://marc.info/?l=ntbugtraq&m=105118056332344&w=2
CopyrightCopyright (C) 2003 Xue Yong Zhi

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.