| Package | Affected versions | Patched versions |
|---|---|---|
| user changeable password | = 4.1 |
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free