Vulnerabilities > CVE-2006-4097 - Remote vulnerability in Cisco Secure Access Control Server

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

NVD

Published: 2006-12-31

Updated: 2018-10-30

Summary

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Secure Access Control Server - Cisco Secure Access Control Server 2.1 Cisco Secure Access Control Server 2.1\(4\) Cisco Secure Access Control Server 2.3 Cisco Secure Access Control Server 2.3\(1\) Cisco Secure Access Control Server 2.3\(2\) Cisco Secure Access Control Server 2.4 Cisco Secure Access Control Server 2.4\(1\) Cisco Secure Access Control Server 2.5 Cisco Secure Access Control Server 2.6 Cisco Secure Access Control Server 2.6.2 Cisco Secure Access Control Server 2.6.3 Cisco Secure Access Control Server 2.6.4 Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server 3.0.1 Cisco Secure Access Control Server 3.0.2 Cisco Secure Access Control Server 3.0.3 Cisco Secure Access Control Server 3.0.4 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.1.1 Cisco Secure Access Control Server 3.1.2 Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.2\(1\) Cisco Secure Access Control Server 3.2\(1.20\) Cisco Secure Access Control Server 3.2\(2\) Cisco Secure Access Control Server 3.2\(2\)_Build_15 Cisco Secure Access Control Server 3.2\(3\) Cisco Secure Access Control Server 3.2.1 Cisco Secure Access Control Server 3.2.2 Cisco Secure Access Control Server 3.2.3 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.3\(1\) Cisco Secure Access Control Server 3.3.1 Cisco Secure Access Control Server 3.3.2 Cisco Secure Access Control Server 3.3.3 Cisco Secure Access Control Server 3.3.4 Cisco Secure Access Control Server 4.0 Cisco Secure Access Control Server 4.1	65

Summary

Vulnerable Configurations

References