CVE-2002-0241 | BDVDB-2026-5105 Detail

Description#

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/8106.php
http://www.securityfocus.com/bid/4048
http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.