582 matches found
DameWare Mini Remote Control Server 3.7x - Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts using the vulnerable software. ...
DameWare Mini Remote Control Server 3.7x - Buffer Overflow (3)
DameWare Mini Remote Control Server 3.7x - Buffer Overflow 3 // source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain...
Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability
...
CVE-2002-0241: Undefined Security Weakness
NDSAuth.DLL in Cisco Secure Authentication Control Server ACS 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services NDS, which could allow those users to authenticate to the server...
CVE-2002-0160
The administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to read HTML, Java class, and image files outside the web root via a .... modified .. in the URL to port 2002...
CVE-2002-0159
Format string vulnerability in the administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to crash the CSADMIN module only denial of service of administration function or execute arbitrary code via...
CVE-2002-0159
The vulnerability CVE-2002-0159 affects Cisco Secure Access Control Server (ACS) for Windows (2.6.x and earlier; 3.x through 3.01 build 40). A format string flaw in the CSADMIN module allows remote attackers to crash the administration function or execute arbitrary code via crafted format strings...
CVE-2002-0160: Undefined Security Weakness
The administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to read HTML, Java class, and image files outside the web root via a .... modified .. in the URL to port 2002...
CVE-2002-0159: Use of Externally-Controlled Format String
Format string vulnerability in the administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to crash the CSADMIN module only denial of service of administration function or execute arbitrary code via...
Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows NT platform. It has been discovered that the web server...
CVE-2002-0241
NDSAuth.DLL in Cisco Secure Authentication Control Server ACS 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services NDS, which could allow those users to authenticate to the server...
CVE-2002-0159
Format string vulnerability in the administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to crash the CSADMIN module only denial of service of administration function or execute arbitrary code via...
CVE-2002-0160
The administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to read HTML, Java class, and image files outside the web root via a .... modified .. in the URL to port 2002...
Security Advisory: Web interface vulnerabilities in ACS for Windows
Cisco Security Advisory: Web interface vulnerabilities in ACS for Windows Revision 1.0 For Public Release 2002 April 03 16:00 UTC +0000 - ---------------------------------------------------------------------------- Contents Summary Products Affected Details Impact Software Versions and Fixes...
Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability ========================================================================== Revision 1.0 For Public Release 2002 February 07...
Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability
...
CVE-1999-0734
A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...
CVE-1999-0734
CiscoSecure Access Control Server (ACS) is affected due to a default configuration that allows remote users to modify the server database without authentication. Affected product/component: CiscoSecure ACS; vulnerability involves unauthenticated access to modify the database via default settings....
CVE-1999-0734: Undefined Security Weakness
A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...