CVE-2006-4098
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 13%
exploitation probability
13%top 4% of all CVEs
observed exploitation
nono source reports it
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Affected products
n/a · n/aReferences
http://osvdb.org/36126http://secunia.com/advisories/23629http://securitytracker.com/id?1017475https://exchange.xforce.ibmcloud.com/vulnerabilities/31327http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlhttp://www.kb.cert.org/vuls/id/477164http://www.securityfocus.com/bid/21900http://www.vupen.com/english/advisories/2007/0068