Cisco Secure Access Control Server Multiple Vulnerabilities
BID:11047
Info
Cisco Secure Access Control Server Multiple Vulnerabilities
| Bugtraq ID: | 11047 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 25 2004 12:00AM |
| Updated: | Aug 25 2004 12:00AM |
| Credit: | These vulnerabilities were announced by the vendor. |
| Vulnerable: |
Cisco Secure ACS Solution Engine Cisco Secure ACS for Windows Server 3.2 Cisco Secure Access Control Server 3.3 (1) Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2 (3) Cisco Secure Access Control Server 3.2 (2) Cisco Secure Access Control Server 3.2 (1) Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.0 |
| Not Vulnerable: | |
Discussion
Cisco Secure Access Control Server Multiple Vulnerabilities
Cisco Secure Access Control Server and Secure Access Control Server Solution Engine are reported prone to multiple vulnerabilities. These vulnerabilities may allow remote attackers to cause denial of service conditions and gain unauthorized access to AAA clients and ACS administration interface.
The following specific vulnerabilities were reported by the vendor:
A remote attacker can trigger a denial of service condition in ACS Windows and ACS Solution Engine by establishing a large amount of TCP connections to the CSAdmin application.
Cisco Secure ACS is reported prone to another denial of service vulnerability when handling Light Extensible Authentication Protocol (LEAP) authentication requests.
Cisco Secure ACS is reported prone to an authentication bypass vulnerability when configured to communicate to a Novell Directory Services (NDS) database for authenticating NDS users.
Another vulnerability affecting ACS may allow remote attackers to gain unauthenticated access to the administration interface of the service.
Cisco Secure Access Control Server and Secure Access Control Server Solution Engine are reported prone to multiple vulnerabilities. These vulnerabilities may allow remote attackers to cause denial of service conditions and gain unauthorized access to AAA clients and ACS administration interface.
The following specific vulnerabilities were reported by the vendor:
A remote attacker can trigger a denial of service condition in ACS Windows and ACS Solution Engine by establishing a large amount of TCP connections to the CSAdmin application.
Cisco Secure ACS is reported prone to another denial of service vulnerability when handling Light Extensible Authentication Protocol (LEAP) authentication requests.
Cisco Secure ACS is reported prone to an authentication bypass vulnerability when configured to communicate to a Novell Directory Services (NDS) database for authenticating NDS users.
Another vulnerability affecting ACS may allow remote attackers to gain unauthenticated access to the administration interface of the service.
Exploit / POC
Cisco Secure Access Control Server Multiple Vulnerabilities
There are no exploits required.
There are no exploits required.
Solution / Fix
Cisco Secure Access Control Server Multiple Vulnerabilities
Solution:
Cisco has released an updated advisory (cisco-sa-20040825-acs) that contains workaround details and updates to address these issues. Customers are advised to review the referenced advisory for further information regarding obtaining and applying appropriate updates.
Solution:
Cisco has released an updated advisory (cisco-sa-20040825-acs) that contains workaround details and updates to address these issues. Customers are advised to review the referenced advisory for further information regarding obtaining and applying appropriate updates.
References
Cisco Secure Access Control Server Multiple Vulnerabilities
References:
References: