CVE-2006-5394

The default configuration of Cisco Secure Desktop CSD has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

PT-2006-6112 · Cisco · Cisco Secure Desktop

Name of the Vulnerable Software and Affected Versions: Cisco Secure Desktop CSD affected versions not specified Description: The issue allows local users to potentially read certain memory pages that were written during another user's SSL VPN session, due to the ClearPageFileAtShutdown registry...

CVE-2006-3226

Cisco Secure Access Control Server ACS 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management...

ciscoXSS.txt

FUJITSU SERVICES SECURITY ADVISORY DATE: 27-01-2006 AUTHOR: THOMAS LIAM ROMANIS VENDOR: Cisco PRODUCT: Cisco Secure ACS VERSIONS TESTED: Cisco Secure ACS version 2.3 UNIX hosted on Netscape FastTrack Server version 2.01c on Sun Solaris 8.0 TITLE: Cisco Secure ACS LogonProxy.cgi Cross Site Scripti...

RE: Cisco Secure ACS Cross Site Scripting Vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Cisco PSIRT response to the statements made by Thomas Liam Romanis of Fujitsu Services Limited in their posting to BugTraq on the 15th June 2006, regarding Cisco Secure ACS LoginProxy.CGI Cross-Site Scripting Vulnerability, located at...

Cisco Secure ACS crossite scripting

LogonProxy.cgi crossite scripting...

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/18449/info Cisco Secure ACS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

CVE-2004-1459

Cisco Secure Access Control Server ACS 3.2, when configured as a Light Extensible Authentication Protocol LEAP RADIUS proxy, allows remote attackers to cause a denial of service device crash via certain LEAP authentication requests...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1458

The CVE-2004-1458 entry concerns Cisco Secure Access Control Server (ACS) 3.2(2) build 15, specifically the CSAdmin web administration interface. The vulnerability allows remote attackers to cause a denial of service (hang) by flooding port 2002 with TCP connections. The available documents confi...

CVE-2004-1458

The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...

CVE-2004-1099

Cisco Secure Access Control Server for Windows ACS Windows and Cisco Secure Access Control Server Solution Engine ACS Solution Engine 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and...

CVE-2004-1458

The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...

CVE-2004-1459

Cisco Secure Access Control Server ACS 3.2, when configured as a Light Extensible Authentication Protocol LEAP RADIUS proxy, allows remote attackers to cause a denial of service device crash via certain LEAP authentication requests...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...