Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the Secure Desktop Web...

Cisco Secure Desktop crossite scripting

Crossite scripting via POST request to https://IP//+CSCOT+/translation?textdomain=csd&prefix=trans&lang=en-us...

Cross site scripting

Cross-site scripting XSS vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.21, 8.12.7, and 8.05; allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not...

CVE-2010-0440

Cross-site scripting XSS vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.21, 8.12.7, and 8.05; allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not...

PT-2010-2204 · Cisco · Cisco Secure Desktop +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Desktop versions prior to 3.5 Cisco ASA appliance versions prior to 8.21, 8.12.7, and 8.05 Description: The issue allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter. This is due to imprope...

Cisco Secure Desktop 3.x - 'translation' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37960/info Cisco Secure Desktop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cisco Secure ACS EAP-Response报文解析拒绝服务漏洞

BUGTRAQ ID: 30997 CVE ID：CVE-2008-2441 CNCVE ID：CNCVE-20082441 Cisco Secure ACS是一款Cisco网络设备的中央管理平台，用于控制设备的认证和授权。 Cisco Secure ACS不正确解析EAP-Response报文长度，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击或可能导致任意代码执行。 远程攻击者作为RADIUS客户端可以针对Cisco Secure...

Cisco Secure ACS DoS

Crash on EAP authentication parsing...

Code injection

Cisco Secure ACS 3.x before 3.34 Build 12 patch 7, 4.0.x, 4.1.x before 4.14 Build 13 Patch 11, and 4.2.x before 4.20 Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users t...

Cisco Secure Access Control Server Detection

Binary data 4633.prm...

Cisco Secure Access Control Server (ACS) CSUserCGI.exe Help Facility XSS

Binary data ciscoacsucpxss.nbin...

Cisco Secure Access Control Server Detection

Binary data ciscoacsdetect.nbin...

Cisco Secure Access Control Server UCP service Detection

Binary data ciscoacsucpdetect.nbin...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

CVE-2008-0533

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

Buffer overflow

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...