CVEvulnerability
CVE-2002-0241
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.
Affected configurations
• cisco secure access control server 3.0.1
References
- http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8106.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4048 Patch, Vendor Advisory
- http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8106.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4048 Patch, Vendor Advisory