Stack-Based Buffer Overflow in Cisco Secure Access Control Server for Windows

CVE-2006-4098

Summary

The CSRadius service within Cisco's Secure Access Control Server for Windows is susceptible to a stack-based buffer overflow. This flaw enables remote attackers to manipulate the service by sending specially crafted RADIUS Accounting-Request packets, potentially leading to arbitrary code execution on the affected systems. This vulnerability affects versions of Cisco Secure Access Control Server prior to 4.1, along with the ACS Solution Engine, which also lacks sufficient protections against such attacks.

References