Cisco ACS UCP Pre-Authentication Buffer Overflows

Cisco Secure Access Control Server (ACS) for Windows User-Changeable Password (UCP) application is a set of CGI programs and web site contents installed on Microsoft IIS.

http://www.securiteam.com/windowsntf...VP0I1PNPM.html