CVE-2006-3226
First published: Mon Jun 26 2006(Updated: )
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Access Control Server | =4.0.1 | |
| Cisco Secure Access Control Server | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html
- http://www.securityfocus.com/bid/18621
- http://securitytracker.com/id?1016369
- http://secunia.com/advisories/20816
- http://www.osvdb.org/26825
- http://securityreason.com/securityalert/1157
- http://www.vupen.com/english/advisories/2006/2524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27328
- http://www.securityfocus.com/archive/1/438258/100/0/threaded
- http://www.securityfocus.com/archive/1/438161/100/0/threaded
- collector/nvd-historical
- vendor/cisco
- product/secure access control server
- canonical/cisco secure access control server
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- version/cisco secure access control server/4.0.1
- version/cisco secure access control server/4.0