CVE-2006-4097: Buffer Overflow
First published: Sun Dec 31 2006(Updated: )
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Access Control Server | =4.1 | |
| Cisco Secure Access Control Server | <=4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/21900
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
- http://securitytracker.com/id?1017475
- http://secunia.com/advisories/23629
- http://www.kb.cert.org/vuls/id/443108
- http://osvdb.org/36125
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31334
Frequently Asked Questions
What is the severity of CVE-2006-4097?
CVE-2006-4097 has a moderate severity level as it can lead to a denial of service due to remote exploitation.
How do I fix CVE-2006-4097?
To fix CVE-2006-4097, upgrade to Cisco Secure Access Control Server version 4.1 or later.
Which versions of Cisco Secure Access Control Server are affected by CVE-2006-4097?
CVE-2006-4097 affects Cisco Secure Access Control Server versions up to 4.0 and prior to 4.1.
What types of attacks are possible with CVE-2006-4097?
CVE-2006-4097 allows remote attackers to cause a denial of service by sending a crafted RADIUS Access-Request packet.
Is there any known workaround for CVE-2006-4097?
There are no specific workarounds for CVE-2006-4097 besides applying the available software update.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- agent/description
- agent/source
- vendor/cisco
- canonical/cisco secure access control server
- version/cisco secure access control server/4.1
- version/cisco secure access control server/4.0