CVE-2011-3305

Directory traversal vulnerability in Cisco Network Admission Control NAC Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755...

Directory Traversal Vulnerability in Cisco Network Admission Control Manager

Cisco Network Admission Control NAC Manager contains a directory traversal vulnerability that may allow an unauthenticated attacker to obtain system information. There are no workarounds to mitigate this vulnerability. Cisco has released software updates that address this vulnerability. This...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting Cisco ASA 5500 Series Adaptive Security Appliances, Cisco Catalyst 6500 Series ASA Services Module, Cisco Firewall Services Module, and Cisco Network Admission Control Manager. These vulnerabilities may allow an...

Veri-NAC Appliance unauthenticated URL Directory Traversal

The remote host appears to be a Black Box Veri-NAC network access control appliance that allows an unauthenticated, remote attacker to retrieve arbitrary files through its web server using specially crafted requests with '/unauthenticated' followed by directory traversal sequences at the start of...

Network access control system PacketFence 2.2 released !

PacketFence is a free and open source network access control NAC system. It can be used to effectively secure networks - from small to very large heterogeneous networks. PacketFence has been deployed in production environments where thousands of users are involved - on wired and wireless networks...

Authentication flaw

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

CVE-2011-0963

The CVE-2011-0963 vulnerability affects Cisco NAC Guest Server system software where the RADIUS authentication configuration allows an unauthenticated user to bypass access restrictions and reach the protected network. Affects all NAC Guest Server versions prior to 2.0.3. Cisco PSIRT/ Cisco advis...

CVE-2011-0963

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

Cisco Security Advisory: Cisco Network Access Control Guest Server System Software Authentication Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Network Access Control Guest Server System Software Authentication Bypass Vulnerability Advisory ID: cisco-sa-20110330-nac Revison 1.0 For Public Release 2011 March 30 1600 UTC GMT...

Cisco Network Admission Control Guest Server System Software Authentication Bypass Vulnerability

...

Cisco Releases Security Advisories

Cisco has released a security advisory to address a vulnerability in some versions of Cisco Secure Access Control System ACS. This vulnerability may allow an attacker to change the password of a user account without any previous access to the user's account or knowledge of the account's previous...

PacketFence v2.0.0 - Latest Version !

"PacketFencePacketFence is an open-source network access control NAC system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless...

Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability Advisory ID: cisco-sa-20080416-nac http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml Revision 1.0 For Public Release 2008 April 16 1600 UTC GMT Summary...

Code injection

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...

CVE-2008-1155

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...

CVE-2008-1155

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...

CVE-2008-1155

Cisco NAC Appliance is vulnerable to an information-disclosure flaw that lets remote attackers obtain the shared secret used by CAS/CAM by sniffing error-logs transmitted over the network. Affected: NAC Appliance versions 3.5.x; 3.6.x prior to 3.6.4.4; 4.0.x prior to 4.0.6; 4.1.x prior to 4.1.2. ...

Trend Micro OfficeScan Policy Server CGI buffer overflow

Added: 03/03/2008 CVE: CVE-2008-1365 BID: 28020 OSVDB: 42500 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the Policy Server for Cisco NAC component allows remote attackers to execute arbitrary commands by...

CVE-2006-4981

Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...

CVE-2006-4983

Cisco NAC allows quarantined devices to communicate over the network with 1 DNS, 2 DHCP, and 3 EAPoUDP, which allows attackers to bypass control methods by tunneling network traffic through one of these protocols...