CVE-2007-1467

The CVE-2007-1467 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting Cisco Secure Access Control Server and related Cisco products. The root issue is insufficient input filtering in the search form used by PreSearch.html and PreSearch.class, allowing remote attackers to...

CVE-2008-0533

Cisco Secure Access Control Server (ACS) for Windows UCP CSUserCGI.exe contains multiple remote-preauth vulnerabilities, including cross-site scripting (XSS) via arguments after the Help parameter and a buffer overflow in the Logout path, affecting UCP before version 4.2. Exploitation could allow...

CVE-2008-0532

CVE-2008-0532 describes a vulnerability in Cisco Secure Access Control Server (ACS) UCP, where multiple buffer overflows in CSuserCGI.exe allow remote code execution. An attacker can exploit a long argument following the Logout parameter to inject and run arbitrary code on affected systems. Affec...