Unscored CVE-2002-0241 EUVD-2002-0238GHSA-fc5v-r7j2-4w95

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell D…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

References

ciscosecure-nds-authentication(8106) vdb-entry
4048 vdb-entry
20020207 Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability vendor-advisory