CVE-2000-1056

HighCVSS 7.5/10Last modified Sep 23, 2026

Description

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1708Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5274
http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1708Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5274

Timeline

Published: Dec 11, 2000
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-10574.6Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privi CVE-2000-10585.0Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial CVE-2000-10597.2The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost CVE-2000-10604.6The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc CVE-2000-10615.1Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a CVE-2000-10625.0Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10635.0Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of CVE-2000-10645.0Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10655.0Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se CVE-2000-10665.0The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of s CVE-2000-106810.0pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.CVE-2000-10696.4pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by speci