CVE-2006-4097

published 2006-12-31

CVE-2006-4097: Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before…

high 7.8 CVSS 3.1

AV N AC L Au N C N I N A C

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	secure	—	—
cisco	secure_access_control_server	<= 4.0	—
cisco	secure_access_control_server	—	—

CWE-399