NVD Vulnerability Detail

CVE-2014-0654

Summary	Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.
Publication Date	Jan. 9, 2014, 6:55 a.m.
Registration Date	Jan. 26, 2021, 3:05 p.m.
Last Update	Nov. 21, 2024, 11:02 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:cisco:context_directory_agent:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://osvdb.org/101802
2	http://osvdb.org/101802
3	http://secunia.com/advisories/56365
4	http://secunia.com/advisories/56365
5	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654	Vendor Advisory
6	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654	Vendor Advisory
7	http://tools.cisco.com/security/center/viewAlert.x?alertId=32366	Vendor Advisory
8	http://tools.cisco.com/security/center/viewAlert.x?alertId=32366	Vendor Advisory
9	http://www.securityfocus.com/bid/64709	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/64709	Third Party Advisory VDB Entry
11	http://www.securitytracker.com/id/1029574	Third Party Advisory VDB Entry
12	http://www.securitytracker.com/id/1029574	Third Party Advisory VDB Entry
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/90168
14	https://exchange.xforce.ibmcloud.com/vulnerabilities/90168

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

Cisco Context Directory Agent におけるキャッシュを変更される脆弱性

Title	Cisco Context Directory Agent におけるキャッシュを変更される脆弱性
Summary	Cisco Context Directory Agent (CDA) には、キャッシュを変更される脆弱性が存在します。ベンダは、本脆弱性を Bug ID CSCuj45383 として公開しています。
Possible impacts	第三者により、巧妙に細工された RADIUS アカウンティングメッセージを伴う反射攻撃 (リプレイアタック) を介して、キャッシュを変更される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Jan. 9, 2014, midnight
Registration Date	Jan. 10, 2014, 4:24 p.m.
Last Update	Jan. 10, 2014, 4:24 p.m.

Affected System

シスコシステムズ

Cisco Context Directory Agent 1.0

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-0654	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0654
National Vulnerability Database (NVD)
2	CVE-2014-0654	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0654

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Cisco Security Notice
1	Cisco Context Directory Agent Replayed RADIUS Accounting Message Vulnerability	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654
Vulnerability Alert
2	32366	http://tools.cisco.com/security/center/viewAlert.x?alertId=32366

Change Log

No	Changed Details	Date of change
0	[2014年01月10日] 掲載	Feb. 17, 2018, 10:37 a.m.