EUVD-2013-1164

Malware in sbrugna...

EUVD-2006-4418

Malware in sbrugna...

EUVD-2008-1164

Malware in sbrugna...

CVE-2013-1177

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

PT-2013-2945

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager versions prior to 4.8.3.1 Cisco Network Admission Control NAC Manager versions 4.9.x prior to 4.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achiev...

CVE-2013-1177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

CVE-2013-1124

The Cisco Network Admission Control NAC agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine ISE server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309...

PT-2013-2896

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC agent on Mac OS X affected versions not specified Description The issue concerns the Cisco Network Admission Control NAC agent on Mac OS X, which fails to verify the X.509 certificate of an Identity Services...

CVE-2013-1124: Undefined Security Weakness

The Cisco Network Admission Control NAC agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine ISE server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309...

Cisco Network Admission Control Manager directory traversal

HTTPS directory traversal...

CVE-2011-3305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Network Admission Control NAC Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755...

PT-2011-4383

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager version 4.8.x Description A directory traversal issue allows remote attackers to read arbitrary files by sending crafted traffic to TCP port 443. Recommendations For Cisco Network Admission Control N...

CVE-2011-0963

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

PT-2011-2781

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Guest Server versions prior to 2.0.3 Description The default configuration of the RADIUS authentication feature allows remote attackers to bypass intended access restrictions and obtain network connectivity...

CVE-2011-0963: Undefined Security Weakness

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability

MIT Kerberos contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is in the GSS-API acceptor component due to lack of pointer validation. An authenticated, remote attacker could exploit the vulnerability by makin...

CVE-2008-1155: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...

CVE-2006-4430

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

CVE-2006-4430: Undefined Security Weakness

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...