10

CVE-2006-4098

EPSS 14.34%
Veröffentlicht 31.12.2006 05:00:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Access Control Server Version3.0

Cisco ≫ Secure Access Control Server Version3.1

Cisco ≫ Secure Access Control Server Version3.2

Cisco ≫ Secure Access Control Server Version3.2.1

Cisco ≫ Secure Access Control Server Version3.2.2

Cisco ≫ Secure Access Control Server Version3.3

Cisco ≫ Secure Access Control Server Version3.3.1

Cisco ≫ Secure Access Control Server Version3.3.2

Cisco ≫ Secure Access Control Server Version4.0

Cisco ≫ Secure Access Control Server Version4.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.34%	0.941

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/23629

Vendor Advisory

http://securitytracker.com/id?1017475

http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml

http://www.securityfocus.com/bid/21900

http://www.vupen.com/english/advisories/2007/0068

http://osvdb.org/36126

http://www.kb.cert.org/vuls/id/477164

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/31327

https://nvd.nist.gov/vuln/detail/CVE-2006-4098

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4098

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4098

EUVD