CVE-2006-4098

CWE-119 — Buffer Overflow4 documents4 sources
Severity
10.0CRITICAL
EPSS
15.8%
top 5.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Secure Access Control Server
Timeline
PublishedDec 31
Latest updateMay 1

Description

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-fm3h-2rr5-p2c2: Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4↗2022-05-01
▶
CVEList
CVE-2006-4098: Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4↗2007-01-08
▶

📋Vendor Advisories

1
Cisco
Cisco Secure Access Control Server Accounting-Request Buffer Overflow Vulnerability↗2007-01-05
▶