4 matches found
DSquare Exploit Pack: D2SEC_CISCOUCP
Name| d2secciscoucp ---|--- CVE| CVE-2008-0533 Exploit Pack| D2ExploitPack Description| Cisco User-Changeable Password UCP Stack Overflow Notes|...
CVE-2008-0533
Cisco Secure Access Control Server (ACS) for Windows UCP CSUserCGI.exe contains multiple remote-preauth vulnerabilities, including cross-site scripting (XSS) via arguments after the Help parameter and a buffer overflow in the Logout path, affecting UCP before version 4.2. Exploitation could allow...
RecurityLabs_Cisco_ACS_UCP_advisory.txt
Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...