CyberSec.Space Logo
Back to CVE Browser

CVE-2006-4098

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1830%
EPSS Percentile34.38th
PublishedDec 31, 2006
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Affected Platforms (CPE)

πŸ“¦
Cisco

Secure Access Control Server

= 3.0
πŸ“¦
Cisco

Secure Access Control Server

= 3.1
πŸ“¦
Cisco

Secure Access Control Server

= 3.2
πŸ“¦
Cisco

Secure Access Control Server

= 3.2\(1\)
πŸ“¦
Cisco

Secure Access Control Server

= 3.2\(1.20\)
πŸ“¦
Cisco

Secure Access Control Server

= 3.2\(2\)
πŸ“¦
Cisco

Secure Access Control Server

= 3.2\(3\)
πŸ“¦
Cisco

Secure Access Control Server

= 3.2.1
πŸ“¦
Cisco

Secure Access Control Server

= 3.2.2
πŸ“¦
Cisco

Secure Access Control Server

= 3.3
πŸ“¦
Cisco

Secure Access Control Server

= 3.3\(1\)
πŸ“¦
Cisco

Secure Access Control Server

= 3.3.1
πŸ“¦
Cisco

Secure Access Control Server

= 3.3.2
πŸ“¦
Cisco

Secure Access Control Server

= 4.0
πŸ“¦
Cisco

Secure Access Control Server

= 4.0.1

References & Advisories

Related Vulnerabilities