CVE-2006-4098 Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary c...
HighCVSS 10.0
EPSS 12.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control server | = 3.0 | No fix listed |
| cisco secure access control server | = 3.1 | No fix listed |
| cisco secure access control server | = 3.2 | No fix listed |
| cisco secure access control server | = 3.2(1) | No fix listed |
| cisco secure access control server | = 3.2(1.20) | No fix listed |
| cisco secure access control server | = 3.2(2) | No fix listed |
| cisco secure access control server | = 3.2(3) | No fix listed |
| cisco secure access control server | = 3.2.1 | No fix listed |
| cisco secure access control server | = 3.2.2 | No fix listed |
| cisco secure access control server | = 3.3 | No fix listed |
| cisco secure access control server | = 3.3(1) | No fix listed |
| cisco secure access control server | = 3.3.1 | No fix listed |
| cisco secure access control server | = 3.3.2 | No fix listed |
| cisco secure access control server | = 4.0 | No fix listed |
| cisco secure access control server | = 4.0.1 | No fix listed |
References
- 36126 vdb-entry
- 23629 third-party-advisory vendor-advisory
- 1017475 vdb-entry
- 20070105 Multiple Vulnerabilities in Cisco Secure Access Control Server vendor-advisory
- VU#477164 third-party-advisory us-government-resource
- 21900 vdb-entry
- ADV-2007-0068 vdb-entry
- cisco-acs-csradius-bo(31327) vdb-entry