CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...

CVE-2008-2441

CVE-2008-2441 affects Cisco Secure ACS (CS ACS) for Windows and related ACS products. The vulnerability is triggered by specially crafted EAP-Response packets where the length field exceeds the actual packet length, causing memory/processing errors in CSRadius and CSAuth. This can lead to denial ...