Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
BID:11577
Info
Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
| Bugtraq ID: | 11577 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 02 2004 12:00AM |
| Updated: | Nov 02 2004 12:00AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue. |
| Vulnerable: |
Cisco Secure ACS Solution Engine 3.3.1 Cisco Secure ACS Solution Engine Cisco Secure Access Control Server 3.3.1 Cisco Secure Access Control Server 3.3 (1) |
| Not Vulnerable: |
Cisco Secure ACS Solution Engine 3.3.2 Cisco Secure ACS Solution Engine 3.3 Cisco Secure Access Control Server 3.3.2 Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2.2 Cisco Secure Access Control Server 3.2.1 Cisco Secure Access Control Server 3.2 (3) Cisco Secure Access Control Server 3.2 (2) Cisco Secure Access Control Server 3.2 (1.20) Cisco Secure Access Control Server 3.2 (1) Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.1 |
Discussion
Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
Cisco Secure Access Control Server is affected by a remote authentication bypass vulnerability. This issue is due to a failure of the software to properly validate user credentials prior to granting access.
The problem presents itself when an attacker attempts to authenticate to the affected server. Apparently the application will grant access to any attacker that presents a valid user name and a certificate that is cryptographically correct.
An attacker can leverage this issue to gain unauthorized remote access to any devices or networks that rely on the affected software for access control.
Cisco Secure Access Control Server is affected by a remote authentication bypass vulnerability. This issue is due to a failure of the software to properly validate user credentials prior to granting access.
The problem presents itself when an attacker attempts to authenticate to the affected server. Apparently the application will grant access to any attacker that presents a valid user name and a certificate that is cryptographically correct.
An attacker can leverage this issue to gain unauthorized remote access to any devices or networks that rely on the affected software for access control.
Exploit / POC
Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
Solution:
The vendor has released an upgrade along with fixes dealing with this issue.
Customers with service contracts are advised to obtain the upgrades through regular channels. All others should contact the vendor for more details. Please see the referenced vendor advisory for contact information.
The following fixed versions of the affected libraries have been released along with detailed installation instructions:
Cisco Secure Access Control Server 3.3 (1)
Cisco Secure Access Control Server 3.3.1
Cisco Secure ACS Solution Engine 3.3.1
Solution:
The vendor has released an upgrade along with fixes dealing with this issue.
Customers with service contracts are advised to obtain the upgrades through regular channels. All others should contact the vendor for more details. Please see the referenced vendor advisory for contact information.
The following fixed versions of the affected libraries have been released along with detailed installation instructions:
Cisco Secure Access Control Server 3.3 (1)
-
Cisco CSCef62913-fix-ACSWIN-v3.3.1.16.zip
http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-acs-win
Cisco Secure Access Control Server 3.3.1
-
Cisco CSCef62913-fix-ACSWIN-v3.3.1.16.zip
http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-acs-win
Cisco Secure ACS Solution Engine 3.3.1
-
Cisco CSCef62913-fix-ACSSE-v3.3.1.16.zip
http://www.cisco.com/pcgi-bin/tablebuild.pl/acs-soleng-3des
References
Cisco Secure Access Control Server Remote Authentication Bypass Vulnerability
References:
References: