Vulnerability Bulletins |
Cisco Secure Access Control Server Remote Command Execution Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the EAP-FAST authentication module of Cisco Secure Access Control Server (ACS) versions 4.0 through 4.2.1.15 could allow an unauthenticated, remote attacker to execute arbitrary commands on the Cisco Secure ACS server. This vulnerability is only present when Cisco Secure ACS is configured as a RADIUS server.The vulnerability is due to improper parsing of user identities used for EAP-FAST authentication. An attacker could exploit this vulnerability by sending crafted EAP-FAST More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130828-acs?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Secure%20Access%20Control%20Server%20Remote%20Command%20Execution%20Vu |
|