Back to CVE Browser

CVE-2008-0532

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1470%

EPSS Percentile38.73th

PublishedMar 14, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.

Affected Platforms (CPE)

📦

Cisco

Acs For Windows

All versions

📦

Cisco

Acs Solution Engine

All versions

📦

Cisco

User Changeable Password

= 4.1

References & Advisories

🔗 http://secunia.com/advisories/29351

🔗 http://securityreason.com/securityalert/3743

🔗 http://securitytracker.com/id?1019608

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml

🔗 http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt

🔗 http://www.securityfocus.com/archive/1/489463/100/0/threaded

🔗 http://www.securityfocus.com/bid/28222

🔗 http://www.vupen.com/english/advisories/2008/0868

Related Vulnerabilities

CVE-2006-409810.0

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Sol...

CVE-2004-109910.0

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution ...

CVE-2006-40977.8

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 an...

CVE-2002-01597.5

Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earl...