CVE-2000-1055: Buffer Overflow
Published Dec 11, 2000
·Updated
Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.
Affected Software
3 affected components
Cisco Secure Access Control Server=2.1
Cisco Secure Access Control Server=2.3\(3\)
Cisco Secure Access Control Server=2.4\(2\)
Remediation
Patch Available
Patch Available
Event History
Dec 11, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1055?
CVE-2000-1055 has a critical severity rating due to its potential to allow remote attackers to execute arbitrary commands.
2
How do I fix CVE-2000-1055?
To fix CVE-2000-1055, upgrade to a version of CiscoSecure ACS Server later than 2.4(2).
3
What software versions are affected by CVE-2000-1055?
CVE-2000-1055 affects CiscoSecure ACS Server versions 2.1, 2.3(3), and 2.4(2) for Windows NT.
4
What type of attack is associated with CVE-2000-1055?
CVE-2000-1055 is associated with a buffer overflow attack that can lead to denial of service or arbitrary command execution.
5
Is CVE-2000-1055 specific to a certain operating system?
Yes, CVE-2000-1055 specifically affects versions of CiscoSecure ACS Server running on Windows NT.