EUVD-2012-3041

Malware in sbrugna...

Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Application Control Engine Administrator IP Address Overlap Vulnerability Advisory ID: cisco-sa-20120620-ace Revision 1.0 For Public Release 2012 June 20 16:00 UTC GMT +---------------------------------------------------------------------...

Design/Logic Flaw

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

CVE-2012-3063

CVE-2012-3063 affects Cisco ACE (Application Control Engine) in multicontext mode. Cisco ACE software versions before A4(2.3) and A5(1.1) fail to share a management IP address correctly among multiple contexts, enabling remote authenticated administrators to bypass access restrictions and read/mo...

CVE-2012-3063: Concurrent Execution using Shared Resource with Improper Synchronization

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

PT-2012-4464

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE versions before A42.3 Cisco Application Control Engine ACE versions before A51.1 Description The issue allows remote authenticated administrators to bypass intended access restrictions and read or modify...