CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-4098

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1830%
EPSS Percentile34.38th
Published2006年12月31日
Last Modified2026年4月23日

Vulnerability Description

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Affected Platforms (CPE)

📦
Cisco

Secure Access Control Server

= 3.0
📦
Cisco

Secure Access Control Server

= 3.1
📦
Cisco

Secure Access Control Server

= 3.2
📦
Cisco

Secure Access Control Server

= 3.2\(1\)
📦
Cisco

Secure Access Control Server

= 3.2\(1.20\)
📦
Cisco

Secure Access Control Server

= 3.2\(2\)
📦
Cisco

Secure Access Control Server

= 3.2\(3\)
📦
Cisco

Secure Access Control Server

= 3.2.1
📦
Cisco

Secure Access Control Server

= 3.2.2
📦
Cisco

Secure Access Control Server

= 3.3
📦
Cisco

Secure Access Control Server

= 3.3\(1\)
📦
Cisco

Secure Access Control Server

= 3.3.1
📦
Cisco

Secure Access Control Server

= 3.3.2
📦
Cisco

Secure Access Control Server

= 4.0
📦
Cisco

Secure Access Control Server

= 4.0.1

References & Advisories

関連する脆弱性情報