PT-2003-1432

CVE-2003-0210

·

Published

2003-04-26

·

Updated

2016-10-18

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Cisco Secure ACS versions prior to 3.1.2
Description: The issue is related to a buffer overflow in the administration service (CSAdmin) that allows remote attackers to cause a denial of service and possibly execute arbitrary code. This is achieved by sending a long user parameter to port 2002.
Recommendations: For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to port 2002 to minimize the risk of exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾