CVE-2007-0105: Buffer Overflow
First published: Tue Jan 09 2007(Updated: )
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Access Control Server | <=4.0.1 | |
| <=4.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
- http://www.securityfocus.com/bid/21900
- http://securitytracker.com/id?1017475
- http://secunia.com/advisories/23629
- http://www.kb.cert.org/vuls/id/744249
- http://www.osvdb.org/32642
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
Frequently Asked Questions
What is the severity of CVE-2007-0105?
CVE-2007-0105 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2007-0105?
The recommended fix for CVE-2007-0105 is to upgrade to Cisco Secure Access Control Server version 4.1 or later.
What systems are affected by CVE-2007-0105?
CVE-2007-0105 affects Cisco Secure Access Control Server versions prior to 4.1.
Can CVE-2007-0105 be exploited remotely?
Yes, CVE-2007-0105 can be exploited remotely through crafted HTTP GET requests.
What type of vulnerability is CVE-2007-0105?
CVE-2007-0105 is a stack-based buffer overflow vulnerability.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco secure access control server
- version/cisco secure access control server/4.0.1