CVE-2007-0105: cisco secure_access_control_server

EPSS trend

Probability

11.18%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

+0.08 pp

From 11.10% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

secunia.com/advisories/23629Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/21900VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/31323VDB EntryX Refsource XF
www.vupen.com/english/advisories/2007/0068VDB EntryX Refsource VUPEN
securitytracker.com/id?1017475VDB EntryX Refsource SECTRACK
www.kb.cert.org/vuls/id/744249Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtmlVendor AdvisoryX Refsource CISCO
www.osvdb.org/32642VDB EntryX Refsource OSVDB

Related vulnerabilities

CVE-2003-0210ciscosecure_access_control_server6.01%23y ago26-04-2003 04:00Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.CVE-2013-3466ciscosecure_access_control_server5.12%13y ago29-08-2013 10:00The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.CVE-2005-0356alaxalaalaxala_networks+2682.76%21y ago31-05-2005 04:00Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.CVE-2005-4499ciscoadaptive_security_appliance_software+62.59%20y ago22-12-2005 11:00The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.CVE-2012-5424ciscosecure_access_control_server2.45%13y ago07-11-2012 23:00Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634.CVE-2000-1056ciscosecure_access_control_server1.69%25y ago22-01-2001 05:00CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

All vulnerabilities insecure_access_control_server

CVE-2007-0105: cisco secure_access_control_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References