APP: Cisco ACS Format String Exploit
This signature detects attempts to exploit a known vulnerability against Cisco ACS. A successful attack can lead to arbitrary code execution.
Extended Description
If a remote attacker is capable of sniffing or injecting traffic in between a server running CiscoSecure ACS for Windows NT and a TACACS+ client, CiscoSecure ACS for Windows NT can be made to crash if an oversized TACACS+ packet is sent to it.
Affected Products
Cisco secure_acs_for_windows_nt
Short Name
APP:CISCO:ACS-FS
Severity
Minor
Recommended
False
Recommended Action
None
Category
APP
Keywords
ACS CVE-2000-1055 Cisco Exploit Format String bid:1706
Release Date
11/20/2006
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
Port
TCP/2002
False Positive
Unknown
Vendors
Cisco
CVSS Score
10.0