CVE-2000-1056: High severity Cisco Secure Access Control Server vulnerability
Published Dec 11, 2000
·Updated
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
Affected Software
3 affected components
Cisco Secure Access Control Server=2.1
Cisco Secure Access Control Server=2.3\(3\)
Cisco Secure Access Control Server=2.4\(2\)
Remediation
Patch Available
Patch Available
Event History
Dec 11, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1056?
CVE-2000-1056 is classified as a high severity vulnerability due to its potential to allow unauthorized access.
2
How do I fix CVE-2000-1056?
To fix CVE-2000-1056, ensure that your LDAP server does not allow null passwords and update to a patched version of Cisco Secure ACS.
3
What versions are affected by CVE-2000-1056?
CVE-2000-1056 affects Cisco Secure ACS Server versions up to and including 2.4(2) and 2.3(3).
4
Can I still use Cisco Secure ACS if it is vulnerable to CVE-2000-1056?
It is highly recommended to not use vulnerable versions of Cisco Secure ACS without applying necessary updates to mitigate CVE-2000-1056.
5
What type of authentication is affected by CVE-2000-1056?
CVE-2000-1056 specifically affects LDAP authentication on the Cisco Secure ACS Server.