CVE-2006-4097

2007-01-0823:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.