KLA10107 ACE vulnerability in Cisco Security Agent

A buffer overflow was found in Cisco Security Agent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SMB packet.

Original advisories

Cisco bulletin

Related products

Cisco-Security-Agent-(CSA)

CVE list

CVE-2007-5580 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Cisco Security Agent 4.5.1 versions 4.5.1.659 and earlier for WindowsCisco Security Agent 5.0 versions 5.0.193 and earlier for WindowsCisco Security Agent 5.1 versions 5.1.79 and earlier for WindowsCisco Security Agent 5.2 versions 5.2.0.237 and earlier for Windows