CVE-2008-0532

2008-03-1420:44:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.927

Percentile

99.0%

JSON

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.

Affected configurations

Nvd

Node

ciscoacs_for_windows

ciscoacs_solution_engine

ciscouser_changeable_passwordMatch4.1

VendorProductVersionCPE
ciscoacs_for_windows*cpe:2.3:a:cisco:acs_for_windows:*:*:*:*:*:*:*:*
ciscoacs_solution_engine*cpe:2.3:a:cisco:acs_solution_engine:*:*:*:*:*:*:*:*
ciscouser_changeable_password4.1cpe:2.3:a:cisco:user_changeable_password:4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	acs_for_windows	*	cpe:2.3:a:cisco:acs_for_windows::::::::
cisco	acs_solution_engine	*	cpe:2.3:a:cisco:acs_solution_engine::::::::
cisco	user_changeable_password	4.1	cpe:2.3:a:cisco:user_changeable_password:4.1:::::::*