{"id":"CVE-2007-0105","aliases":["EUVD-2007-0109","GHSA-p9mq-8p7x-v7f2"],"status":"published","title":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS)...","description":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.11177,"percentile":0.95977,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-01-09T00:00:00Z","modified":"2026-06-16T22:34:55Z","products":[{"vendor":"cisco","product":"secure_access_control_server"}],"references":[{"url":"http://secunia.com/advisories/23629","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21900","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31323","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0068","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securitytracker.com/id?1017475","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/744249","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.osvdb.org/32642","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0105"},{"url":"https://github.com/advisories/GHSA-p9mq-8p7x-v7f2"}],"sources":{"cve":[{"id":"CVE-2007-0105","description":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.","status":"published","published":"2007-01-09T00:00:00Z","modified":"2024-08-07T12:03:37.131Z","updated_at":"2026-11-02T13:34:03.879328Z"}],"euvd":[{"id":"EUVD-2007-0109","description":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.","status":"published","published":"2007-01-09T00:00:00Z","modified":"2024-08-07T12:03:37Z","updated_at":"2026-11-03T01:38:32.139738Z"}],"ghsa":[{"id":"GHSA-p9mq-8p7x-v7f2","title":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS)...","description":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.","status":"published","published":"2022-05-01T17:41:41Z","modified":"2023-01-31T05:02:51Z","updated_at":"2026-11-02T14:48:20.805498Z"}],"nvd":[{"id":"CVE-2007-0105","description":"Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.","status":"published","published":"2007-01-09T00:28:00Z","modified":"2026-06-16T22:34:55.563Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:11.752648Z"}]}}