10

CVE-2006-4098

EPSS 14.34%
Published 31.12.2006 05:00:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Secure Access Control Server Version3.0

Cisco ≫ Secure Access Control Server Version3.1

Cisco ≫ Secure Access Control Server Version3.2

Cisco ≫ Secure Access Control Server Version3.2.1

Cisco ≫ Secure Access Control Server Version3.2.2

Cisco ≫ Secure Access Control Server Version3.3

Cisco ≫ Secure Access Control Server Version3.3.1

Cisco ≫ Secure Access Control Server Version3.3.2

Cisco ≫ Secure Access Control Server Version4.0

Cisco ≫ Secure Access Control Server Version4.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	14.34%	0.941

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/23629

Vendor Advisory

http://securitytracker.com/id?1017475

http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml

http://www.securityfocus.com/bid/21900

http://www.vupen.com/english/advisories/2007/0068

http://osvdb.org/36126

http://www.kb.cert.org/vuls/id/477164

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/31327

https://nvd.nist.gov/vuln/detail/CVE-2006-4098

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4098

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4098

EUVD