CVE-2006-3226: cisco secure_access_control_server

EPSS trend

Probability

2.39%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.39% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

securitytracker.com/id?1016369VDB EntryX Refsource SECTRACK
www.osvdb.org/26825VDB EntryX Refsource OSVDB
securityreason.com/securityalert/1157Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/27328VDB EntryX Refsource XF
www.vupen.com/english/advisories/2006/2524VDB EntryX Refsource VUPEN
secunia.com/advisories/20816Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/438161/100/0/threadedMailing ListX Refsource BUGTRAQ
www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.htmlVendor AdvisoryX Refsource CISCO
www.securityfocus.com/bid/18621VDB EntryX Refsource BID
www.securityfocus.com/archive/1/438258/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2003-0210ciscosecure_access_control_server6.01%23y ago26-04-2003 04:00Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.CVE-2013-3466ciscosecure_access_control_server5.12%13y ago29-08-2013 10:00The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.CVE-2007-0105ciscosecure_access_control_server11.18%19y ago09-01-2007 00:00Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.CVE-2005-0356alaxalaalaxala_networks+2682.76%21y ago31-05-2005 04:00Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.CVE-2005-4499ciscoadaptive_security_appliance_software+62.59%20y ago22-12-2005 11:00The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.CVE-2012-5424ciscosecure_access_control_server2.45%13y ago07-11-2012 23:00Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634.

All vulnerabilities insecure_access_control_server

CVE-2006-3226: cisco secure_access_control_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References