CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2000-12-11

Last modified

2024-08-08

Affected products

• Secure Access Control Server (Cisco)

References

• http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml
• http://www.securityfocus.com/bid/1708
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5274