CVE-2008-0532

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.

• CWE-119

• http://secunia.com/advisories/29351Patch, Vendor Advisory
• http://securityreason.com/securityalert/3743
• http://securitytracker.com/id?1019608
• http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtmlPatch
• http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt
• http://www.securityfocus.com/archive/1/489463/100/0/threaded
• http://www.securityfocus.com/bid/28222Exploit, Patch
• http://www.vupen.com/english/advisories/2008/0868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41154
• http://secunia.com/advisories/29351Patch, Vendor Advisory
• http://securityreason.com/securityalert/3743
• http://securitytracker.com/id?1019608
• http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtmlPatch
• http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt
• http://www.securityfocus.com/archive/1/489463/100/0/threaded
• http://www.securityfocus.com/bid/28222Exploit, Patch
• http://www.vupen.com/english/advisories/2008/0868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41154

Published

Mar 14, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0526Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running …
• CVE-2008-0527The HTTP server in Cisco Unified IP Phone 7935 and 7936 runn…
• CVE-2008-0528Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960,…
• CVE-2008-0529Buffer overflow in the telnet server in Cisco Unified IP Pho…
• CVE-2008-0530Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960,…
• CVE-2008-0531Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7…
• CVE-2008-0533Multiple cross-site scripting (XSS) vulnerabilities in secur…
• CVE-2008-0534The SSH server in (1) Cisco Service Control Engine (SCE) bef…
• CVE-2008-0535Unspecified vulnerability in the SSH server in (1) Cisco Ser…
• CVE-2008-0536Unspecified vulnerability in the SSH server in (1) Cisco Ser…
• CVE-2008-0537Unspecified vulnerability in the Supervisor Engine 32 (Sup32…
• CVE-2008-0538Multiple SQL injection vulnerabilities in phpIP Management 4…