CVE-2004-1461: High severity Cisco Secure Access Control Server vulnerability

Published Dec 31, 2004

Updated

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.

Affected Software

10 affected components

Cisco Secure Access Control Server=3.0

Cisco Secure Access Control Server=3.1

Cisco Secure Access Control Server=3.2

Cisco Secure Access Control Server=3.2\(1\)

Cisco Secure Access Control Server=3.2\(2\)

Cisco Secure Access Control Server=3.2\(3\)

Cisco Secure Access Control Server=3.3

Cisco Secure Access Control Server=3.3\(1\)

Cisco Secure Acs Solution Engine

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 13, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1461?

CVE-2004-1461 is considered a critical vulnerability due to its ability to allow remote attackers to bypass authentication.

How do I fix CVE-2004-1461?

To mitigate CVE-2004-1461, upgrade to a patched version of Cisco Secure Access Control Server that addresses this issue.

What versions are affected by CVE-2004-1461?

CVE-2004-1461 affects Cisco Secure Access Control Server versions 3.2(3) and earlier, including 3.0, 3.1, and other 3.2 subversions.

Can remote attackers exploit CVE-2004-1461?

Yes, remote attackers can exploit CVE-2004-1461 to gain unauthorized access to the system by connecting to a specific TCP port.

What is the attack vector for CVE-2004-1461?

The attack vector for CVE-2004-1461 is through an unauthenticated TCP connection established by the ACS GUI during user authentication.