Vulnerabilities > CVE-2004-1458 - Multiple vulnerability in Cisco products

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

cisco

NVD

Published: 2004-12-31

Updated: 2018-10-30

Summary

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.2\(1\) Cisco Secure Access Control Server 3.2\(2\) Cisco Secure Access Control Server 3.2\(3\) Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.3\(1\) Cisco Secure ACS Solution Engine *	10

References

http://osvdb.org/9182
http://secunia.com/advisories/12386/
http://www.ciac.org/ciac/bulletins/o-203.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
http://www.securityfocus.com/bid/11047
https://exchange.xforce.ibmcloud.com/vulnerabilities/17114