high7.5
CVE-2000-1056
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
Impact
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Secure Access Control Server | Versions 2.1, 2.3\(3\), 2.4\(2\) |
References
- NVD record
- CVE.org record
- http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml
- http://www.securityfocus.com/bid/1708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5274
- http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml
- http://www.securityfocus.com/bid/1708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5274