Lucene search

[email protected]CVE-2000-1056

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-1056

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

cisco

ciscosecure acs server 2.4(2)

ldap authentication

cve-2000-1056

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Affected configurations

NVD

Node

ciscosecure_access_control_serverMatch2.1windows_nt

ciscosecure_access_control_serverMatch2.3\(3\)windows_nt

ciscosecure_access_control_serverMatch2.4\(2\)windows_nt

CPENameOperatorVersion
cisco:secure_access_control_servercisco secure access control servereq2.1
cisco:secure_access_control_servercisco secure access control servereq2.3\(3\)
cisco:secure_access_control_servercisco secure access control servereq2.4\(2\)

CPE	Name	Operator	Version
cisco:secure_access_control_server	cisco secure access control server	eq	2.1
cisco:secure_access_control_server	cisco secure access control server	eq	2.3\(3\)
cisco:secure_access_control_server	cisco secure access control server	eq	2.4\(2\)

References

www.cisco.com/warp/public/707/csecureacsnt-pub.shtml

www.securityfocus.com/bid/1708

exchange.xforce.ibmcloud.com/vulnerabilities/5274

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

Related for CVE-2000-1056

cvelist1 nvd1