CVE-2006-3226 | BDVDB-2026-17757 Detail
Description#
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://securitytracker.com/id?1016369
- http://www.osvdb.org/26825
- http://securityreason.com/securityalert/1157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27328
- http://www.vupen.com/english/advisories/2006/2524
- http://secunia.com/advisories/20816
- http://www.securityfocus.com/archive/1/438161/100/0/threaded
- http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html
- http://www.securityfocus.com/bid/18621
- http://www.securityfocus.com/archive/1/438258/100/0/threaded
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.