CVE-2002-0159: High severity Cisco Secure Access Control Server vulnerability
Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0159?
CVE-2002-0159 is classified as a medium severity vulnerability due to the potential for denial of service and arbitrary code execution.
How do I fix CVE-2002-0159?
To fix CVE-2002-0159, update your Cisco Secure Access Control Server to a version that is not affected by this vulnerability.
What versions of Cisco Secure Access Control Server are affected by CVE-2002-0159?
CVE-2002-0159 affects Cisco Secure Access Control Server versions 2.6.x and 3.0.1, as well as certain earlier versions.
What type of attack can CVE-2002-0159 enable?
CVE-2002-0159 can enable remote attackers to perform a denial of service attack on the CSADMIN module or execute arbitrary code.
Is CVE-2002-0159 a local or remote vulnerability?
CVE-2002-0159 is considered a remote vulnerability, allowing attackers to exploit it without physical access to the machine.