CVE-2007-0058

Cisco Clean Access CCA 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager CAM allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file...

CVE-2007-0057

Cisco Clean Access CCA 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access...

CVE-2007-0058

CVE-2007-0058 affects Cisco Clean Access (CCA) on the Clean Access Manager (CAM): versions 3.5.x up to 3.5.9 and 3.6.x up to 3.6.1.1 allow remote attackers to bypass authentication and download arbitrary manual database backups by brute-forcing the snapshot filename and requesting the file direct...

CVE-2007-0057

CVE-2007-0057 affects Cisco Clean Access (CCA) 3.6.x (3.6.4.2 and earlier) and 4.0.x (4.0.3.2 and earlier). The root cause is improper configuration or modification of the shared secret authentication key, causing all devices to share the same secret. This enables remote attackers to gain unautho...

Cisco Clean Access多个远程安全漏洞

Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access Advisory ID: cisco-sa-20070103-CleanAccess http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Revision 1.0 For Public Release 2007 January 03 1600 UTC GMT -...

Multiple Vulnerabilities in Cisco Clean Access

...

CentOS 4 : kernel (CESA-2006:0617)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2006-4430

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service disk consumption, or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332...

Multiple Cisco Clean Access network admission control appliance vulnerabilities

It's possible to upload files to server without authentication...

[SA18103] Cisco Clean Access Manager Obsolete JSP Files Vulnerability

TITLE: Cisco Clean Access Manager Obsolete JSP Files Vulnerability SECUNIA ADVISORY ID: SA18103 VERIFY ADVISORY: http://secunia.com/advisories/18103/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Cisco Clean Access CCA 3.x http://secunia.com/product/5561/ DESCRIPTION: Al...

CVE-2005-4332

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager is affected by CVE-2005-4332. The issue allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files, specifically admin/uploadclient.jsp, apply_firmware_ac...

CVE-2005-4332

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including 1 admin/uploadclient.jsp, 2 applyfirmwareaction.jsp, and 3 file.jsp...

DoS in Cisco Clean Access

Date of release: 16/12/2005 Software: Cisco Clean Access/Perfigo CleanMachines http://www.cisco.com/en/US/products/ps6128/index.html Affected versions: Tested on 3.5.5, assumed all =current. Risk: Medium/High Discovered by: Alex Lanstein Background -------- Cisco Clean Access is an easily deploye...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. SPDX-FileCopyrightText: 2002 Jason Lidow Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2631

Cisco Clean Access CCA 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users...

CVE-2005-2631

Cisco Clean Access CCA 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users...

CVE-2005-2631

Concretely, CVE-2005-2631 affects Cisco Clean Access (CCA) versions 3.3.0–3.3.9, 3.4.0–3.4.5, and 3.5.0–3.5.3. The root cause is improper authentication when invoking API methods, potentially allowing remote attackers to bypass security checks, change a user’s assigned role, or disconnect users. ...

Cisco Clean Access Agent (Perfigo) bypass

Description: Cisco Clean Access is an easily deployed software solution that can automatically detect, isolate, and clean infected or vulnerable devices that attempt to access your network. It identifies whether networked devices such as laptops, personal digital assistants, even game consoles ar...