VulnerabilityModified
CVE-2007-0105
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
HIGH 7.5EPSS 11.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 11.10% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- cisco/secure access control server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23629Patch, Vendor Advisory
- http://securitytracker.com/id?1017475
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/744249US Government Resource
- http://www.osvdb.org/32642
- http://www.securityfocus.com/bid/21900
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
- http://secunia.com/advisories/23629Patch, Vendor Advisory
- http://securitytracker.com/id?1017475
- http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/744249US Government Resource
- http://www.osvdb.org/32642
- http://www.securityfocus.com/bid/21900
- http://www.vupen.com/english/advisories/2007/0068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31323
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.