CVE-2001-0748

CVE-2001-0748 concerns Acme.Serve 1.7, used in Cisco Secure ACS Unix and possibly other products. The vulnerability is a directory traversal that lets remote attackers read arbitrary files by prepending several / (slash) characters to the URI. The issue stems from Acme.Serve’s embedded web server...

CVE-2002-0241

The vulnerability CVE-2002-0241 affects Cisco Secure Authentication Control Server (ACS) 3.0.1 via the NDSAuth.DLL, which fails to validate the Expired/Disabled state of NetWare/NDS users. As a result, such accounts could authenticate to the ACS despite being expired or disabled. The issue is cau...

CVE-2002-0938

CVE-2002-0938 describes a cross-site scripting vulnerability in CiscoSecure ACS 3.0, allowing remote attackers to execute arbitrary scripts or HTML as other web users via the action parameter in a link to setup.exe. The available sources reiterate the same description but do not provide additiona...

CVE-2002-0938

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe...

CVE-2002-0938

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe...

Security Advisory: Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory: Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability ========================================================================= Revision 1.0 For Public Release 2002 July 2 10:00 UTC -0800...

Root directory access in Cisco Secure ACS

By adding additional slah to URL after hostname it's possible to address root folder...

Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability

...

CVE-2002-0160

CVE-2002-0160 affects Cisco Secure Access Control Server (ACS) for Windows, versions 2.6.x and earlier and 3.x through 3.01 (build 40). The vulnerability allows remote attackers to read files (HTML, Java class, images) outside the web root by crafting a modified .... path in the URL aimed at port...

CiscoSecure ACS crossite scripting

Crossite scripting in web interface requires authentication...

XSS in CiscoSecure ACS v3.0

sMax. Security Advisory ------------------------------- Title: Cross-Site Scripting in CiscoSecure ACS v3.0 Date: June 14, 2002 PRODUCT AFFECTED: CiscoSecure ACS v3.0 Win32 PRODUCT OVERVIEW: CiscoSecure ACS is Cisco's implementation of RADIUS. v3.0 is the current release of the product. Taken fro...

Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting

Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows ...

Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows NT platform. It has been discovered that the web server...

iXsecurity.20020316.csadmin_dir.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020316.csadmindir.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a directory traversal issue. Threat: An attacker could retrieve any html, htm, class, jpg, jpe...

Directory traversal and format string bug in Cisco Secure ACS

Any html, htm, class, jpg, jpeg or gif files can be remotely accessed. Format string bug can lead to remote server compromise...

iXsecurity.20020314.csadmin_fmt.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020314.csadminfmt.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a format string vulnerability. Threat: An attacker could send an "invalid" URL to the webserve...

Web Interface Vulnerabilities in Cisco Secure ACS for Windows

...

Проблемы с блокирвоанными пользователями в Cisco Secure ACS (protection bypass)

Пользователи с блокирвоанными учетными записями NDS могут войти в систему...

CVE-2001-0748

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / slash characters to the URI...

CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...