{"id":"CVE-2002-0241","aliases":["EUVD-2002-0238","GHSA-fc5v-r7j2-4w95"],"status":"published","title":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired...","description":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01619,"percentile":0.76224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2002-05-29T04:00:00Z","modified":"2026-06-16T21:57:03Z","products":[{"vendor":"cisco","product":"secure_access_control_server"}],"references":[{"url":"http://www.iss.net/security_center/static/8106.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4048","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0241"},{"url":"https://github.com/advisories/GHSA-fc5v-r7j2-4w95"}],"sources":{"cve":[{"id":"CVE-2002-0241","description":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T02:42:28.543Z","updated_at":"2026-11-02T14:33:55.642267Z"}],"euvd":[{"id":"EUVD-2002-0238","description":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T02:42:28Z","updated_at":"2026-11-03T01:15:01.501317Z"}],"ghsa":[{"id":"GHSA-fc5v-r7j2-4w95","title":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired...","description":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.","status":"published","published":"2022-04-30T18:18:49Z","modified":"2023-01-30T05:05:27Z","updated_at":"2026-11-02T14:47:16.830144Z"}],"nvd":[{"id":"CVE-2002-0241","description":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.","status":"published","published":"2002-05-29T04:00:00Z","modified":"2026-06-16T21:57:03.713Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.220505Z"}]}}