CVE-2002-0241: Cisco Secure Access Control Server

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Affected products

• Cisco Secure Access Control Server: version 3.0.1 only

Published 2002-05-29. Last modified 2026-06-16.