CVE-2006-4098

Published: Dec 31, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.

Affected (15)

Products: Cisco: Secure Access Control Server

Cisco

1 product

Secure Access Control Server

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Access Control Server	Version 3.0
Cisco Secure Access Control Server	Version 3.1
Cisco Secure Access Control Server	Version 3.2.1
Cisco Secure Access Control Server	Version 3.2.2
Cisco Secure Access Control Server	Version 3.2
Cisco Secure Access Control Server	Version 3.2(1.20)
Cisco Secure Access Control Server	Version 3.2(1)
Cisco Secure Access Control Server	Version 3.2(2)
Cisco Secure Access Control Server	Version 3.2(3)
Cisco Secure Access Control Server	Version 3.3.1
Cisco Secure Access Control Server	Version 3.3.2
Cisco Secure Access Control Server	Version 3.3
Cisco Secure Access Control Server	Version 3.3(1)
Cisco Secure Access Control Server	Version 4.0.1
Cisco Secure Access Control Server	Version 4.0