CVE - CVE-2006-3226

CVE-ID
CVE-2006-3226	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:18621 URL:http://www.securityfocus.com/bid/18621 BUGTRAQ:20060623 Cisco Secure ACS Weak Session Management Vulnerability URL:http://www.securityfocus.com/archive/1/438161/100/0/threaded BUGTRAQ:20060623 Re: Cisco Secure ACS Weak Session Management Vulnerability URL:http://www.securityfocus.com/archive/1/438258/100/0/threaded CISCO:20060623 Cisco Secure ACS Weak Session Management Vulnerability URL:http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html OSVDB:26825 URL:~~http://www.osvdb.org/26825~~ (Obsolete source) SECTRACK:1016369 URL:http://securitytracker.com/id?1016369 SECUNIA:20816 URL:http://secunia.com/advisories/20816 SREASON:1157 URL:http://securityreason.com/securityalert/1157 VUPEN:ADV-2006-2524 URL:~~http://www.vupen.com/english/advisories/2006/2524~~ (Obsolete source) XF:cisco-acs-session-spoofing(27328) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/27328
Assigning CNA
MITRE Corporation
Date Record Created
20060626	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060626)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)