Signature Detail
Short Name |
APP:CISCO:ACS-FS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
APP |
Keywords |
Cisco ACS Format String Exploit |
Release Date |
2006/11/20 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Cisco ACS Format String Exploit
This signature detects attempts to exploit a known vulnerability against Cisco ACS. A successful attack can lead to arbitrary code execution.
Extended Description
If a remote attacker is capable of sniffing or injecting traffic in between a server running CiscoSecure ACS for Windows NT and a TACACS+ client, CiscoSecure ACS for Windows NT can be made to crash if an oversized TACACS+ packet is sent to it.
Affected Products
- Cisco Secure ACS for Windows NT 2.42.0
References
- BugTraq: 1706
- CVE: CVE-2000-1055