CVE-2023-45239

A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tacplus to inject shell commands and gain remote code execution on the tacplus server...

CVE-2000-0486

The CVE-2000-0486 entry documents a buffer overflow in the Cisco TACACS+ tac_plus server triggered by a malformed packet with a long length field, leading to a potential denial of service . The affected component is tac_plus on Cisco TACACS+ implementations; the root cause is a faulty handling of...

CVE-2000-0486: Undefined Security Weakness

Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...