Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability Advisory ID: cisco-sa-20080416-nac http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml Revision 1.0 For Public Release 2008 April 16 1600 UTC GMT Summary...

CVE-2008-1155

Cisco NAC Appliance is vulnerable to an information-disclosure flaw that lets remote attackers obtain the shared secret used by CAS/CAM by sniffing error-logs transmitted over the network. Affected: NAC Appliance versions 3.5.x; 3.6.x prior to 3.6.4.4; 4.0.x prior to 4.0.6; 4.1.x prior to 4.1.2. ...