Directory traversal and format string bug in Cisco Secure ACS
Published:		04.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1908
Type:		remote
Level:		6/10
Description:		Any html, htm, class, jpg, jpeg or gif files can be remotely accessed. Format string bug can lead to remote server compromise.

Affected:		CISCO : Secure ACS 3.0
		CISCO : Secure ACS 2.6

Original document		Patrik Karlsson, iXsecurity.20020314.csadmin_fmt.a (04.04.2002)
		CISCO, Security Advisory: Web interface vulnerabilities in ACS for Windows (04.04.2002)
		Patrik Karlsson, iXsecurity.20020316.csadmin_dir.a (04.04.2002)

Discuss:

Read or add your comments to this news (0 comments)