CVE-2004-1458: Medium severity Cisco Secure Access Control Server vulnerability

Published Dec 31, 2004

Updated

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.

Affected Software

10 affected components

Cisco Secure Access Control Server=3.2

Cisco Secure Acs Solution Engine

Cisco Secure Access Control Server=3.3\(1\)

Cisco Secure Access Control Server=3.0

Cisco Secure Access Control Server=3.1

Cisco Secure Access Control Server=3.2

Cisco Secure Access Control Server=3.3

Cisco Secure Access Control Server=3.2\(3\)

Cisco Secure Access Control Server=3.2\(1\)

Cisco Secure Access Control Server=3.2\(2\)

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 13, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1458?

CVE-2004-1458 is considered a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2004-1458?

To fix CVE-2004-1458, update to a patched version of Cisco Secure Access Control Server that addresses this vulnerability.

What systems are affected by CVE-2004-1458?

CVE-2004-1458 affects Cisco Secure Access Control Server versions 3.0, 3.1, 3.2, and 3.3 with specific builds.

What type of attack does CVE-2004-1458 enable?

CVE-2004-1458 enables remote attackers to perform a denial of service attack by flooding TCP connections to the server.

Is CVE-2004-1458 still a concern today?

Yes, CVE-2004-1458 remains a concern for any systems still operating on affected versions of Cisco Secure Access Control Server.