CVE-2004-1458

Cisco Secure Access Control Server 3.2(2) build 15 - Denial of Service via TCP Connection Flood to Port 2002

Title source: llm

Description

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/17114

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/9182

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/12386/

Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac

http://www.ciac.org/ciac/bulletins/o-203.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/11047

Patch, Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml

Scores

EPSS 0.0180

EPSS Percentile 76.2%

Details

Status published

Products (9)

cisco/secure_access_control_server 3.0

cisco/secure_access_control_server 3.1

cisco/secure_access_control_server 3.2 (2 CPE variants)

cisco/secure_access_control_server 3.2\(1\)

cisco/secure_access_control_server 3.2\(2\)

cisco/secure_access_control_server 3.2\(3\)

cisco/secure_access_control_server 3.3

cisco/secure_access_control_server 3.3\(1\)

cisco/secure_acs_solution_engine

Published Dec 31, 2004

Tracked Since Feb 18, 2026