Description
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.
References
- cisco-acs-csadmin-dos(31334) vdb-entry
- 23629 third-party-advisory
- 21900 vdb-entry
- VU#443108 third-party-advisory
- ADV-2007-0068 vdb-entry
- 1017475 vdb-entry
- 36125 vdb-entry
- 20070105 Multiple Vulnerabilities in Cisco Secure Access Control Server vendor-advisory