ACS Blog 0.8/0.9/1.0/1.1 - 'Name' HTML Injection

source: https://www.securityfocus.com/bid/12921/info ACS Blog is affected by an HTML injection vulnerability. The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an affected Web page. Name:...

CVE-2005-0802

CVE-2005-0802 concerns a cross-site scripting (XSS) vulnerability in the search.asp handler of ACS Blog versions 0.8 through 1.1b. The issue allows remote attackers to inject and execute arbitrary web script or HTML via the search parameter, potentially impacting users viewing search results. The...

XSS in ACS blog

XSS vulnerability exist in the ACS blog ASP WEBLOG SYSTEM . Vulnerable : ACS Blog v 0.8 ACS Blog v 0.9 ACS Blog v 1.0 ACS Blog v 1.1b Code : /search.asp?search=223Cbr3E3Ciframe+src3D22http3A2F2Fgoogle.com223E3C2Fiframe3E or goto /search.asp and copy this code : "briframe...

ACS Blog 0.80.91.01.1 - search.asp Cross-Site Scripting

ACS Blog 0.80.91.01.1 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/12836/info ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12836/info ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...

CVE-2004-1460

CVE-2004-1460 affects Cisco Secure Access Control Server (ACS) 3.2(3) and earlier. When configured with an anonymous bind in Novell Directory Services (NDS), and authenticating NDS users with NDS, remote attackers can gain unauthorized access to AAA clients by using a blank password. The NVD note...

CVE-2004-1461

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier is vulnerable to an authentication bypass: during GUI login a separate unauthenticated TCP connection is spawned on a random port, and an attacker on the same IP can connect to that port to bypass authentication. This issue is documented...

CVE-2004-1459

The CVE refers to Cisco Secure Access Control Server (ACS) 3.2 when configured as a Light EAP (LEAP) RADIUS proxy. The vulnerability allows remote attackers to trigger a denial of service (device crash) by sending certain LEAP authentication requests. The available documents confirm the affected ...

CVE-2004-1458

The CVE-2004-1458 entry concerns Cisco Secure Access Control Server (ACS) 3.2(2) build 15, specifically the CSAdmin web administration interface. The vulnerability allows remote attackers to cause a denial of service (hang) by flooding port 2002 with TCP connections. The available documents confi...

CVE-2004-1099

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1 are affected when EAP-TLS is enabled. They do not properly handle expired or untrusted certificates, allowing remote attackers to bypass authentication a...

Cisco Secure ACS protection bypass

IF EAP-TLS is used validity of ceritifcation agency is not checked...

Cisco Secure ACS multiple bugs

TCP requests flood DoS, LEAP DoS, anonymous access if Novell Directory Service with anonymous account enabled is used, weak protection against connection hijacking...

Cisco Secure ACS for Windows CSAdmin vulnerable to buffer overflow via login requests

Overview Cisco Secure ACS for Windows contains a buffer overflow vulnerability that could permit a remote attacker to execute arbitrary code or cause a denial of service. Description Cisco Secure ACS for Windows is an authentication, authorization, and accounting AAA server. From Cisco Security...

CVE-2003-0210

Buffer overflow in the administration service CSAdmin for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002...

CiscoSecure ACS for Windows CSAdmin Login Overflow DoS

The remote web server crashed when the 'login.exe' CGI received a too login query string. This leads to a denial of service or even execution of arbitrary code. Some versions of Cisco Secure ACS web server are known to be vulnerable to this flaw. This script was written by Xue Yong Zhi Rewritten ...

CVE-2003-0210

Buffer overflow in the administration service CSAdmin for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002...

CVE-2003-0210

The CVE-2003-0210 issue is a buffer overflow in Cisco Secure ACS for Windows CSAdmin (web management on port 2002). The root cause is CSAdmin handling a login request with an excessively long user parameter, triggering a buffer overflow that can cause DoS and may allow arbitrary code execution wi...

NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-04 Topic: Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS Release Date: 2003-04-24 CVE CAN ID: CAN-2003-0210 Affected system: =================== Cisco Secure ACS 2.6.4 for Windows a...

Cisco Secure ACS buffer overflow

Buffer overflow in TCP/2002 web interface port...

Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability ======================================================================= Revision 1.0 For Public Release 2003 April 23 08:00 GMT -...