CVE

Id
20201  
CVE No.
CVE-2006-4097  
Status
Candidate  
Description
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187284 20201 CVE-2006-4097 CERT-VN:VU#443108  View
187285 20201 CVE-2006-4097 URL:http://www.kb.cert.org/vuls/id/443108  View
187286 20201 CVE-2006-4097 BID:21900  View
187287 20201 CVE-2006-4097 URL:http://www.securityfocus.com/bid/21900  View
187288 20201 CVE-2006-4097 CISCO:20070105 Multiple Vulnerabilities in Cisco Secure Access Control Server  View
187289 20201 CVE-2006-4097 URL:http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml  View
187290 20201 CVE-2006-4097 VUPEN:ADV-2007-0068  View
187291 20201 CVE-2006-4097 URL:http://www.vupen.com/english/advisories/2007/0068  View
187292 20201 CVE-2006-4097 OSVDB:36125  View
187293 20201 CVE-2006-4097 URL:http://osvdb.org/36125  View
187294 20201 CVE-2006-4097 SECTRACK:1017475  View
187295 20201 CVE-2006-4097 URL:http://securitytracker.com/id?1017475  View
187296 20201 CVE-2006-4097 SECUNIA:23629  View
187297 20201 CVE-2006-4097 URL:http://secunia.com/advisories/23629  View
187298 20201 CVE-2006-4097 XF:cisco-acs-csadmin-dos(31334)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58807 JVNDB-2006-001073 Business Objects Crystal Enterprise における他のユーザのセッションをハイジャックされる脆弱性 Business Objects Crystal Enterprise は、予想可能なセッション識別子を生成するため、他のユーザのセッションをハイジャックされる脆弱性が存在します。 CVE-2006-4099 20201 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001073.html  View