CVE

Id
9527  
CVE No.
CVE-2004-1099  
Status
Candidate  
Description
Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.  
Phase
Assigned (20041130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64482 9527 CVE-2004-1099 CISCO:20041102 Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication  View
64483 9527 CVE-2004-1099 URL:http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml  View
64484 9527 CVE-2004-1099 CIAC:P-028  View
64485 9527 CVE-2004-1099 URL:http://www.ciac.org/ciac/bulletins/p-028.shtml  View
64486 9527 CVE-2004-1099 XF:ciscosecure-eaptls-auth-bypass(17936)  View
64487 9527 CVE-2004-1099 URL:http://xforce.iss.net/xforce/xfdb/17936  View
64488 9527 CVE-2004-1099 BID:11577  View

Related JVN