Cisco Security Agent for Microsoft Windows Crafted SMB Packet Remote Overflow

The version of Cisco Security Agent installed on the remote host is affected by a buffer overflow vulnerability. By sending a specially- crafted SMB request to the agent, an unauthenticated attacker may be able to execute arbitrary code with SYSTEM level privileges. C Tenable Network Security, In...

CVE-2007-5580

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port 1 139 or 2 445...

Buffer overflow

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port 1 139 or 2 445...

CVE-2007-5580

CVE-2007-5580 is a remote buffer overflow in Cisco Security Agent on Windows caused by a driver not validating SMB data, exploitable via crafted SMB packets over TCP ports 139 or 445. Affected CSA versions include Windows 4.5.1 (<= 4.5.1.671/672 hotfix path), 5.0 (<= 5.0.0.225), 5.1 (<= ...

CVE-2007-5580

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port 1 139 or 2 445...

KLA10107 ACE vulnerability in Cisco Security Agent

A buffer overflow was found in Cisco Security Agent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SMB packet. Original advisories Cisco bulletin Related products Cisco-Security-Agent-CSA/ CVE lis...

Windows平台下的Cisco Security Agent SMB远程缓冲区溢出漏洞

Cisco Security Agent提供对服务器和桌面电脑系统的安全威胁保护。 Windows平台下的Cisco Security Agent在系统驱动中存在缓冲区溢出，远程攻击者可以利用漏洞进行内存破坏攻击，可能导致任意代码执行。 当处理特殊构建的TCP段到TCP 139或445端口时，Cisco Security Agent系统驱动处理SMB协议时可导致内核内存破坏，可能以系统进程权限执行任意指令。 Cisco Security Agent 5.1 .79 Cisco Security Agent 5.0 .193 Cisco Security Agent 4.5.1 .657...

PolDoc CMS 0.96 (download_file.php) File Disclosure Vulnerability

BUGTRAQ ID: 26723 CVECAN ID: CVE-2007-5580 Cisco Security Agent是为服务器和桌面计算系统提供威胁防护的安全软件代理。 CSA for Windows在处理畸形的SMB数据包时存在漏洞，远程攻击者可能利用此漏洞控制安装了CSA的系统。 CSA for Windows版本所带的一个驱动程序在处理SMB请求报文时没有正确检查用户提供的数据长度，可能触发一个系统内核中的栈溢出。远程攻击者可以造成安装了CSA的系统重启、蓝屏。通过精心构造数据，攻击者可能远程执行任意指令，从而完全控制系统。 CSA默认允许访问TCP...

NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2007-02 Cisco Security Agent Remote Buffer Overflow Vulnerability Release Date: 2007-12-06 CVE ID: CVE-2007-5580 http://www.nsfocus.com/english/homepage/research/0702.htm Affected systems & software =================== Cisco Security Agent for Windows 4.5.1.672 Cisco...

Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2007-1067

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors...

Code injection

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka...

CVE-2007-1066

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists DACL for the connection client GUI, whic...

CVE-2007-1065

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka...

Authentication flaw

The 1 TTLS CHAP, 2 TTLS MSCHAP, 3 TTLS MSCHAPv2, 4 TTLS PAP, 5 MD5, 6 GTC, 7 LEAP, 8 PEAP MSCHAPv2, 9 PEAP GTC, and 10 FAST authentication methods in Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deploye...

CVE-2007-1064

Cisco Secure Services Client CSSC 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent CSA 5.0 and 5.1 when a vulnerable Trust Agent has been deployed, and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local...

CVE-2007-1066

The CVE-2007-1066 issue affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x/2.x, Cisco Security Agent (CSA) 5.0/5.1 when a vulnerable Trust Agent is deployed, and the Meetinghouse AEGIS SecureConnect Client. The root cause is an insecure default Discretionary Access Control List (DAC...

CVE-2007-1064

The CVE-2007-1064 issue affects Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x/2.x, Cisco Security Agent (CSA) 5.0/5.1 (when a vulnerable Trust Agent is deployed), and the Meetinghouse AEGIS SecureConnect Client. The vulnerability arises because privileges are not dropped when invoking ...

Cisco Security Agent Management Center vulnerable to authentication bypass

Overview Cisco Security Agent Management Center CSAMC may be vulnerable to authentication bypass when configured to use an external Lightweight Directory Access Protocol LDAP server for authentication. Description Cisco Security Agent Management Center CSAMC is a component of the CiscoWorks VPN...

CVE-2006-5660

Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 is vulnerable to authentication bypass when configured to use an external LDAP server. A remote attacker who knows a valid administrator username can supply a blank password and gain administrative access to CSAMC with administrat...