Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting

Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows ...

Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows NT platform. It has been discovered that the web server...

iXsecurity.20020316.csadmin_dir.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020316.csadmindir.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a directory traversal issue. Threat: An attacker could retrieve any html, htm, class, jpg, jpe...

Directory traversal and format string bug in Cisco Secure ACS

Any html, htm, class, jpg, jpeg or gif files can be remotely accessed. Format string bug can lead to remote server compromise...

iXsecurity.20020314.csadmin_fmt.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020314.csadminfmt.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a format string vulnerability. Threat: An attacker could send an "invalid" URL to the webserve...

Web Interface Vulnerabilities in Cisco Secure ACS for Windows

...

Проблемы с блокирвоанными пользователями в Cisco Secure ACS (protection bypass)

Пользователи с блокирвоанными учетными записями NDS могут войти в систему...

CVE-2001-0748

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / slash characters to the URI...

CVE-2000-1055

Buffer overflow in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet...

CVE-2000-1056

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...

CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...

CVE-2000-1054

CVE-2000-1054 affects CiscoSecure ACS Server 2.4(2) and earlier, via the CSAdmin module. A buffer overflow in processing a large packet may allow remote denial of service and possibly arbitrary command execution. The provided documents do not specify mitigation or patch details.

CVE-2000-1055

CVE-2000-1055 corresponds to a buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier. The vulnerability can be triggered by processing a large TACACS+ packet, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands. The linked sources (NVD, CVE rec...

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier versions are affected by an LDAP authentication bypass when the LDAP server allows null passwords. The vulnerability allows remote attackers to bypass authentication and access the server, with partial impact to confidentiality, integrity, and availabilit...

CVE-2000-1055: Undefined Security Weakness

Buffer overflow in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet...

CVE-2000-1054: Undefined Security Weakness

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...

CVE-2000-1055

Buffer overflow in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet...

CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...

CVE-2000-1056

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...

CVE-2000-1056: Undefined Security Weakness

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...