Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
http://www.kb.cert.org/vuls/id/697049
http://www.cisco.com/warp/public/707/cisco-sa-20030423-ACS.shtml