CVE-2002-0241

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-05-29

Last modified

2024-08-08

Affected products

• Secure Access Control Server (Cisco)

References

• http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml
• http://www.iss.net/security_center/static/8106.php
• http://www.securityfocus.com/bid/4048