Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-0951

EPSS 68.04% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0951

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Secure Access Control System未授权密码更改安全策略绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Secure ACS是中央RADIUS和TACACS+服务器，集成了用户身份验证、用户和管理员设备访问控制和策略控制为一个集中的统一网络解决方案。 Cisco Secure Access Control System（ACS）5.1.0.44.6之前的5.1版本及5.2.0.26.3之前的5.2版本的基于web的管理界面中存在信任管理漏洞。此漏洞可使远程未验证攻击者不用提供旧密码即可任意更改所有用户账号的密码，成功利用此漏洞要求在内部ID库中定义用户账号。 此漏洞不允许攻击者执行对ACS数据库
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0951

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0951

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-04-01 · 13 CVEs total

CVE-2010-3447Horde Gollem文件浏览器view.php跨站脚本攻击漏洞
CVE-2010-3693Horde Dynamic IMP和Groupware Webmail跨站脚本攻击漏洞
CVE-2010-4235RealNetworks Helix Server 'x-wap-profile'头选项格式串处理漏洞
CVE-2010-4596RealNetworks Helix和Helix Mobile Server 'RTSP'栈缓冲区溢出漏洞
CVE-2010-4778Horde IMP和Groupware Webmail多个跨站脚本攻击漏洞
CVE-2011-0461Novell openSUSE aaa_base包/etc/init.d/boot.localfs任意文件覆盖漏洞
CVE-2011-0468Novell openSUSE 'aaa_base'标签扩展文件名处理权限提升漏洞
CVE-2011-1126VMware VIX API和Workstation 'vmrun'本地权限提升漏洞
CVE-2011-1546Aphpkb Andy's PHP Knowledgebase多个SQL注入漏洞
CVE-2011-1555Andy's PHP Knowledgebase saa.php SQL注入漏洞
CVE-2011-1556Andy's PHP Knowledgebase 'pdfa' SQL注入漏洞
CVE-2011-1557ICloudCenter ICJobSite SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-0951

No comments yet

Leave a comment