Cisco Network Access Manager Directory Traversal Vulnerability

This module tests whether a directory traversal vulnerability is present in versions of Cisco Network Access Manager 4.8.x You may wish to change FILE e.g. passwd or hosts, MAXDIRS and RPORT depending on your environment. This module requires Metasploit: https://metasploit.com/download Current...

Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager Advisory ID: cisco-sa-20111005-nac Revision 1.0 For Public Release 2011 October 05 1600 UTC GMT...

CVE-2011-3305

CVE-2011-3305 affects Cisco Network Admission Control (NAC) Manager software version 4.8.x. The vulnerability is a directory traversal flaw in the management interface that listens on TCP port 443 and could allow an unauthenticated attacker to read arbitrary files from the system. Cisco’s advisor...