Buffer overflow in Cisco Acs For Windows
CVE-2008-0532
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.571 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Acs_for_windows
- Cisco Acs_solution_engine
- Cisco User_changeable_password — versions 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@cisco.com (Exploit, Patch, vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)