EUVD-2005-4494

Malware in sbrugna...

Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability

Hi! The following is the description of the vulnerability in the Cisco implementation of downloadable ACLs, which are used by the Cisco PIX firewall authentication proxy aka cut-through proxy and VPN 3000 concentrators. When an administrator creates an ACL on the Cisco Secure Access Control Serve...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...