Vulnerability CVE-2004-1460
Published: 2004-12-31   Modified: 2012-02-12

Description:
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Cisco -> Secure access control server 
Cisco -> Secure acs solution engine 

 References:
http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
http://xforce.iss.net/xforce/xfdb/17117
http://www.securityfocus.com/bid/11047
Copyright 2024, cxsecurity.com

 

Back to Top