Description
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/23629Patch, Vendor Advisory
- http://securitytracker.com/id?1017475
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/744249US Government Resource
- http://www.osvdb.org/32642
- http://www.securityfocus.com/bid/21900
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
- http://secunia.com/advisories/23629Patch, Vendor Advisory
- http://securitytracker.com/id?1017475
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/744249US Government Resource
- http://www.osvdb.org/32642
- http://www.securityfocus.com/bid/21900
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
Timeline
- Published
- Jan 9, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified