Description
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt ↗
- http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml ↗
- http://www.securityfocus.com/archive/1/489463/100/0/threaded ↗
- http://www.securityfocus.com/bid/28222 ↗
- http://www.vupen.com/english/advisories/2008/0868 ↗
- http://securityreason.com/securityalert/3743 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41154 ↗
- http://securitytracker.com/id?1019608 ↗
- http://secunia.com/advisories/29351 ↗