Unscored CVE-2006-4098 EUVD-2006-4090GHSA-fm3h-2rr5-p2c2

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Eng…

Published Jan 8, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

References

23629 third-party-advisory
21900 vdb-entry
VU#477164 third-party-advisory
cisco-acs-csradius-bo(31327) vdb-entry
ADV-2007-0068 vdb-entry
1017475 vdb-entry
20070105 Multiple Vulnerabilities in Cisco Secure Access Control Server vendor-advisory
36126 vdb-entry