Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory, cisco-sa-20100217-fwsm, addresses a vulnerability in the Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Successful and repeated exploitation ...

Mandrake Linux Security Advisory : madwifi-source (MDKSA-2007:082)

The athratesample function in the athrate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service failed KASSERT and system crash by moving a connected system to a location with low signal strength, and possibly other vectors related to a race...

Code injection

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local...

CVE-2007-1067

The CVE-2007-1067 entry affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent is deployed), and the Meetinghouse AEGIS SecureConnect Client. The underlying issue is improper parsing of commands, enabling loc...

CVE-2007-1068

The CVE-2007-1068 entry describes a credential leakage issue where authentication credentials used by Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x/2.x, Cisco Security Agent (CSA) 5.0/5.1 (with vulnerable Trust Agent), and Meetinghouse AEGIS SecureConnect Client are stored in plaintext...

CVE-2006-5553

Cisco Security Agent CSA for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager CUCM and Unified Presence Server CUPS, allows remote attackers to cause a denial of service resource consumption via a port scan with certain options...

CVE-2006-5553

Cisco Security Agent (CSA) for Linux is affected in 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as deployed with Unified CallManager (CUCM) and Unified Presence Server (CUPS). The issue allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain opt...

Cisco Security Agent远程端口扫描拒绝服务漏洞

Cisco Security Agent CSA可以为服务器和桌面计算系统提供威胁防护。 CSA在处理端口扫描等特殊情况时存在漏洞，远程攻击者可能利用此漏洞导致服务响应能力下降。 如果以特定的选项对CSA for Linux运行端口扫描的话，就可能消耗过多的系统资源，导致拒绝服务。 Cisco CSA 5.0 for Linux Hotfix 5.0.0.1 Cisco CSA 4.5 for Linux Hotfix 4.5.1.6 Cisco CUCM = 5.04 Cisco CUPS = 1.02 临时解决方法：...

CVE-2005-3886

CVE-2005-3886 concerns Cisco Security Agent (CSA) on Windows, specifically versions 4.5.0 and 4.5.1. The vulnerability allows a local user to bypass protections and escalate to system privileges by executing certain local software, as described in the NVD/CVE entries and Cisco advisory. The conne...

CVE-2005-2280

CVE-2005-2280 affects Cisco Security Agent (CSA) 4.5 and allows remote attackers to cause a denial of service (system crash) via a crafted IP packet. The available sources confirm the vulnerability is network‑based with no authentication required and no further impact details are provided in the ...

Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================== Cisco Security Advisory: Cisco Security Agent Vulnerable to Crafted IP Attack Revision 1.0 For Public Release 2005 July 13 1600 UTC GMT...

CVE-2004-1112

The CVE-2004-1112 entry concerns Cisco Security Agent (CSA) prior to 4.0.3 build 728. A buffer overflow trigger waits five minutes for a user response before terminating, which could let remote attackers bypass the overflow protection by issuing additional overflow attempts within the timeout. Af...