Secunia Logo
Netsikker nu! 2008
 
Cisco Secure Access Control Server Multiple Vulnerabilities
Secunia Advisory: SA12386
Release Date: 2004-08-26
Popularity: 9,445 views

Critical:
Less critical
Impact: Security Bypass
DoS
Where: From local network
Solution Status: Vendor Patch

Software:Cisco Secure ACS 3.x

Subscribe: Instant alerts on relevant vulnerabilities


Description:
Multiple vulnerabilities have been reported in Cisco Secure Access Control Server (ACS), which can be exploited by malicious people to cause a DoS (Denial of Service) or bypass user authentication.

1) A connection handling error within the web-based management interface (CSAdmin) causes the interface to stop responding to requests when it is flooded with TCP connections. This may also cause other services processing authentication related requests to become unstable or stop responding.

This vulnerability affects version 3.2(2) build 15.

2) An error within the processing of LEAP (Light Extensible Authentication Procotol) authentication requests can be exploited to crash a vulnerable device.

Successful exploitation requires that the device has been configured as a LEAP RADIUS Proxy.

This vulnerability affects version 3.2.

3) An authentication error within the handling of NDS (Novell Directory Services) users can be exploited to be authenticated against a NDS database by supplying a valid username and a blank password.

Successful exploitation requires that an anonymous bind is allowed in NDS, and NDS users are authenticated with NDS as an external database.

This vulnerability affects versions 3.2(3) and prior of the ACS Solution Engine.

4) An authentication error within the ACS administration web service may allow bypassing of the authentication. The problem is that an ACS GUI is created on a random port when a user is successfully authenticated and following only the user's IP address is used to confirm the user's identity when accessing this GUI.

This can be exploited to bypass the user authentication by accessing the ACS GUI created on a random port with a spoofed IP address matching an authenticated user.

This vulnerability affects versions 3.2(3) and prior.

The vulnerabilities affect only Cisco Secure ACS for Windows and Cisco Secure ACS Solution Engine.

Solution:
See patch matrix in the vendor's original advisory.

Provided and/or discovered by:
Reported by vendor.

Original Advisory:
http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 19
New vulnerabilities: 68
Updated advisories: 62

Moderately // 198 views
Debian update for php5
Moderately // 143 views
Atarone CMS Multiple Vulnerabilities
Moderately // 182 views
Debian update for squid
Less // 193 views
SUSE update for mercurial
Moderately // 240 views
SUSE update for openssh
Less // 183 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Debian update for php5 // 59 views
2. SUSE update for openssh // 55 views
3. H-Sphere webshell4 Cross-Site Scripting and Request Forgery // 41 views
4. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 40 views
5. WMNews Cross-Site Scripting Vulnerabilities // 40 views
6. SUSE update for mercurial // 36 views
7. MetaGauge Directory Traversal Vulnerability // 33 views
8. HP-UX NFS/ONCplus Denial of Service Vulnerability // 32 views
9. CMME Information Disclosure Security Issues // 32 views
10. Atarone CMS Multiple Vulnerabilities // 32 views