296 matches found
Code injection
Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka...
CVE-2007-1066
Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists DACL for the connection client GUI, whic...
Authentication flaw
The 1 TTLS CHAP, 2 TTLS MSCHAP, 3 TTLS MSCHAPv2, 4 TTLS PAP, 5 MD5, 6 GTC, 7 LEAP, 8 PEAP MSCHAPv2, 9 PEAP GTC, and 10 FAST authentication methods in Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deploye...
CVE-2007-1067
Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors...
CVE-2007-1064
The CVE-2007-1064 issue affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x/2.x, Cisco Security Agent (CSA) 5.0/5.1 (when a vulnerable Trust Agent is deployed), and the Meetinghouse AEGIS SecureConnect Client. The vulnerability arises because privileges are not dropped when invoking ...
CVE-2007-1066
The CVE-2007-1066 issue affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x/2.x, Cisco Security Agent (CSA) 5.0/5.1 when a vulnerable Trust Agent is deployed, and the Meetinghouse AEGIS SecureConnect Client. The root cause is an insecure default Discretionary Access Control List (DAC...
CVE-2007-1064
Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local...
Cisco Security Agent Management Center vulnerable to authentication bypass
Overview Cisco Security Agent Management Center CSAMC may be vulnerable to authentication bypass when configured to use an external Lightweight Directory Access Protocol LDAP server for authentication. Description Cisco Security Agent Management Center CSAMC is a component of the CiscoWorks VPN...
CVE-2006-5660
Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 is vulnerable to authentication bypass when configured to use an external LDAP server. A remote attacker who knows a valid administrator username can supply a blank password and gain administrative access to CSAMC with administrat...
Cisco Security Agent Management Center authentication bypass
Acces with empty password is possible if NTLM authentication is configured...
Cisco Security Agent Management Center LDAP Administrator Authentication Bypass
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
CVE-2006-5553
Cisco Security Agent CSA for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager CUCM and Unified Presence Server CUPS, allows remote attackers to cause a denial of service resource consumption via a port scan with certain options...
CVE-2006-5553
Cisco Security Agent CSA for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager CUCM and Unified Presence Server CUPS, allows remote attackers to cause a denial of service resource consumption via a port scan with certain options...
CVE-2006-5553
Cisco Security Agent (CSA) for Linux is affected in 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as deployed with Unified CallManager (CUCM) and Unified Presence Server (CUPS). The issue allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain opt...
Cisco Security Agent for Linux DoS
Port scanning causes system resources exhaustion...
Cisco Security Agent远程端口扫描拒绝服务漏洞
Cisco Security Agent CSA可以为服务器和桌面计算系统提供威胁防护。 CSA在处理端口扫描等特殊情况时存在漏洞，远程攻击者可能利用此漏洞导致服务响应能力下降。 如果以特定的选项对CSA for Linux运行端口扫描的话，就可能消耗过多的系统资源，导致拒绝服务。 Cisco CSA 5.0 for Linux Hotfix 5.0.0.1 Cisco CSA 4.5 for Linux Hotfix 4.5.1.6 Cisco CUCM = 5.04 Cisco CUPS = 1.02 临时解决方法：...
Cisco Security Advisory: Cisco Security Agent for Linux Port Scan Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent for Linux Port Scan Denial of Service Advisory ID: cisco-sa-20061025-csa http://www.cisco.com/warp/public/707/cisco-sa-20061025-csa.shtml Revision 1.0 For Public Release 2006 October 25 1600 UTC GMT...
Cisco Security Agent for Linux Port Scan Denial of Service
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation ===================================================================== Advisory ID: cisco-sa-20051129-csa http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml...