Lucene search

[email protected]CVE-2002-0159

HistoryJun 25, 2002 - 4:00 a.m.

CVE-2002-0159

2002-06-2504:00:00

CWE-134

[email protected]

web.nvd.nist.gov

cisco

secure access control server

windows

remote attack

csadmin

arbitrary code

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.

Affected configurations

NVD

Node

ciscosecure_access_control_serverMatch2.6

ciscosecure_access_control_serverMatch2.6.2

ciscosecure_access_control_serverMatch2.6.3

ciscosecure_access_control_serverMatch2.6.4

ciscosecure_access_control_serverMatch3.0

ciscosecure_access_control_serverMatch3.0.1

CPENameOperatorVersion
cisco:secure_access_control_servercisco secure access control servereq2.6
cisco:secure_access_control_servercisco secure access control servereq2.6.2
cisco:secure_access_control_servercisco secure access control servereq2.6.3
cisco:secure_access_control_servercisco secure access control servereq2.6.4
cisco:secure_access_control_servercisco secure access control servereq3.0
cisco:secure_access_control_servercisco secure access control servereq3.0.1

CPE	Name	Operator	Version
cisco:secure_access_control_server	cisco secure access control server	eq	2.6
cisco:secure_access_control_server	cisco secure access control server	eq	2.6.2
cisco:secure_access_control_server	cisco secure access control server	eq	2.6.3
cisco:secure_access_control_server	cisco secure access control server	eq	2.6.4
cisco:secure_access_control_server	cisco secure access control server	eq	3.0
cisco:secure_access_control_server	cisco secure access control server	eq	3.0.1

References

marc.info/?l=bugtraq&m=101787248913611&w=2

www.cisco.com/warp/public/707/ACS-Win-Web.shtml

www.iss.net/security_center/static/8742.php

www.osvdb.org/2062

www.securityfocus.com/bid/4416

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Related for CVE-2002-0159

nvd1 cvelist1 cisco1