CVE-2000-1055

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtmlPatch, Vendor Advisory
http://www.osvdb.org/1569
http://www.securityfocus.com/bid/1706Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5273
http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtmlPatch, Vendor Advisory
http://www.osvdb.org/1569
http://www.securityfocus.com/bid/1706Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5273

Timeline

Published: Dec 11, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-10567.5CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null CVE-2000-10574.6Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privi CVE-2000-10585.0Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial CVE-2000-10597.2The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost CVE-2000-10604.6The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc CVE-2000-10615.1Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a CVE-2000-10625.0Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10635.0Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of CVE-2000-10645.0Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10655.0Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10665.0The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of s CVE-2000-106810.0pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.