| Package | Affected versions | Patched versions |
|---|---|---|
| secure access control server | = 4.1≤ 4.0 |
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free