Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
BID:4048
Info
Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
| Bugtraq ID: | 4048 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2002 12:00AM |
| Updated: | Feb 07 2002 12:00AM |
| Credit: | This vulnerability was publicized in a Cisco Security Advisory on February 7th, 2002. |
| Vulnerable: |
Cisco Secure ACS for Windows NT 3.0 .1 |
| Not Vulnerable: | |
Discussion
Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
Cisco Secure ACS is a highly scalable, high-performance access control server that runs on Windows NT/2000 operating systems and Unix variants. It operates as a centralized Remote Access Dial-In User Service (RADIUS) or TACACS+ server system and controls the authentication of users accessing resources through the network.
A vulnerability has been discovered in Cisco Secure ACS for Windows NT that have been configured for NDS (Novell Directory Services).
Users in the NDS database whose accounts have expired or been disabled may still successfully authenticate with the service. An expired or disabled user who authenticates with the correct credentials will still be able to access the service. The normal, expected behavior is that their access to the service will be denied.
It should be noted that only Cisco Secure ACS 3.01 for Windows NT is prone to this issue.
Cisco Secure ACS is a highly scalable, high-performance access control server that runs on Windows NT/2000 operating systems and Unix variants. It operates as a centralized Remote Access Dial-In User Service (RADIUS) or TACACS+ server system and controls the authentication of users accessing resources through the network.
A vulnerability has been discovered in Cisco Secure ACS for Windows NT that have been configured for NDS (Novell Directory Services).
Users in the NDS database whose accounts have expired or been disabled may still successfully authenticate with the service. An expired or disabled user who authenticates with the correct credentials will still be able to access the service. The normal, expected behavior is that their access to the service will be denied.
It should be noted that only Cisco Secure ACS 3.01 for Windows NT is prone to this issue.
Exploit / POC
Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
Solution:
Cisco has released a patch which addresses this issue. It is available to users with a valid CCO user account.
Cisco Secure ACS for Windows NT 3.0 .1
Solution:
Cisco has released a patch which addresses this issue. It is available to users with a valid CCO user account.
Cisco Secure ACS for Windows NT 3.0 .1
-
Cisco ACS30_NDSAuth_patch.zip
http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-acs-win
References
Cisco Secure ACS NDS Expired/Disabled User Authentication Vulnerability
References:
References: