PT-2006-4121 · Cisco · Cisco Secure Access Control Server

Darren Bounds · Publicado 2006-06-26 · Atualizado 2018-10-18 · CVE-2006-3226

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server (ACS) version 4.x

Description The issue allows remote attackers to bypass authentication via various methods by utilizing the client's IP address and the server's port number to grant access to an HTTP server port for an administration session.

Recommendations For Cisco Secure Access Control Server (ACS) version 4.x, consider restricting access to the administration session to minimize the risk of exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-2006-3226

Produtos afetados

Cisco Secure Access Control Server

Referências · 11

• http://osvdb.org/26825 · Nota
• http://secunia.com/advisories/20816 · Nota
• http://securityfocus.com/archive/1/438258/100/0/threaded · Nota
• http://securityreason.com/securityalert/1157 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3226 · Nota de Segurança
• http://securityfocus.com/archive/1/438161/100/0/threaded · Nota
• http://securityfocus.com/bid/18621 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27328 · Nota
• http://securitytracker.com/id?1016369 · Nota
• http://vupen.com/english/advisories/2006/2524 · Nota
• http://cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html · Aviso do Fabricante