CVE-2004-1461

Currently unrated

Key Information:

Vendor
Cisco
Status
Secure Access Control Server
Secure Acs Solution Engine
Vendor
CVE Published:
31 December 2004

Summary

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17118
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/11047
vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/cisco-sa-20040825-ac...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.