Multiple Vulnerabilities in Cisco Security Agent (cisco-sa-20100217-csa)

According to the version identified on the Management Center for Cisco Agents web interface, the version of Cisco Security Agent installed on the remote host is affected by multiple vulnerabilities : - An unspecified directory traversal vulnerability exists in the Management Center. CVE-2010-0146...

CVE-2010-0147

The CVE-2010-0147 issue affects the Management Center for Cisco Security Agents. A SQL injection vulnerability exists that allows remote authenticated users to execute arbitrary SQL commands. Affected versions are Cisco Security Agent Management Center: 5.1 prior to 5.1.0.117, 5.2 prior to 5.2.0....