NVD

Id
62753  
Name
CVE-2006-4097  
Description
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2006-12-31  
Modified Date
2011-09-02  
Seq
2006-4097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326198 62753 CVE-2006-4097 1017475  View
326199 62753 CVE-2006-4097 20070105 Multiple Vulnerabilities in Cisco Secure Access Control Server  View
326200 62753 CVE-2006-4097 VU#443108  View
326201 62753 CVE-2006-4097 21900  View
326202 62753 CVE-2006-4097 ADV-2007-0068  View
326203 62753 CVE-2006-4097 cisco-acs-csadmin-dos(31334)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51345 JVNDB-2007-000007 Cisco Secure ACS の 不正な RADIUS 認証リクエストによるサービス運用妨害 (DoS) の脆弱性 Cisco Secure Access Control Server (ACS) には、RADIUS 認証リクエストの不正なパケットを処理した際に、CSRadius サービスがクラッシュする脆弱性が存在します。 CVE-2006-4097 20199 CVE-2006-4097 62753 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000007.html 2007-01-06 2007-04-01 View