CVE-2006-4097

CVE-2006-4097 · HIGH Severity

AV:N/AC:L/AU:N/C:N/I:N/A:C

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.

Learn more about our Cis Benchmark Audit For Cisco.