CVE-2006-4097: Buffer Overflow
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4097?
CVE-2006-4097 has a moderate severity level as it can lead to a denial of service due to remote exploitation.
How do I fix CVE-2006-4097?
To fix CVE-2006-4097, upgrade to Cisco Secure Access Control Server version 4.1 or later.
Which versions of Cisco Secure Access Control Server are affected by CVE-2006-4097?
CVE-2006-4097 affects Cisco Secure Access Control Server versions up to 4.0 and prior to 4.1.
What types of attacks are possible with CVE-2006-4097?
CVE-2006-4097 allows remote attackers to cause a denial of service by sending a crafted RADIUS Access-Request packet.
Is there any known workaround for CVE-2006-4097?
There are no specific workarounds for CVE-2006-4097 besides applying the available software update.