Vulnerabilities > CVE-2004-1460 - Unspecified vulnerability in Cisco products

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

cisco

NVD

Published: 2004-12-31

Updated: 2024-11-20

Summary

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.3\(1\) Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2\(1\) Cisco Secure Access Control Server 3.2\(2\) Cisco Secure Access Control Server 3.2\(3\) Cisco Secure ACS Solution Engine *	10

Summary

Vulnerable Configurations

References