The flaws could allow attackers to crash two ACS products

News Story by Paul Roberts -

AUGUST 26, 2004 (IDG NEWS SERVICE) - Networking equipment maker Cisco Systems Inc. is warning customers about security holes in two products that provide user authentication and authorization services for network devices such as firewalls and routers.

The company issued a security advisory yesterday identifying "multiple denial-of-service- and authentication-related vulnerabilities" in two products: the Cisco Secure Access Control Server for Windows (Windows ACS) and Cisco Secure Access Control Server Solution Engine (Secure ACS). The vulnerabilities could allow attackers or malicious users to crash the ACS products or gain unauthorized access to network devices.

ComputerWorld