PT-2000-1965 · Cisco · Ciscosecure Acs Server

Publicado 2000-12-11 · Atualizado 2017-10-10 · CVE-2000-1056

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CiscoSecure ACS Server versions 2.4(2) and earlier

Description The issue allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Recommendations For CiscoSecure ACS Server versions 2.4(2) and earlier, update to a version later than 2.4(2) to resolve the issue.

Correção

Identificadores relacionados

CVE-2000-1056

Produtos afetados

Ciscosecure Acs Server

Referências · 4

• http://cisco.com/warp/public/707/csecureacsnt-pub.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-1056 · Nota de Segurança
• http://securityfocus.com/bid/1708 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5274 · Nota