EUVD-2013-1164

Malware in sbrugna...

EUVD-2006-4418

Malware in sbrugna...

EUVD-2008-1164

Malware in sbrugna...

CVE-2013-1177

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

Cisco Network Admission Control (NAC) Version

The remote host is a Cisco Network Admission Control NAC Manager. It is possible to read the NAC version by connecting to the switch using SSH. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69788; scriptversion"1.28";...

PT-2013-2945

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager versions prior to 4.8.3.1 Cisco Network Admission Control NAC Manager versions 4.9.x prior to 4.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achiev...

CVE-2013-1177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

CVE-2013-1124

The Cisco Network Admission Control NAC agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine ISE server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309...

CVE-2013-1124: Undefined Security Weakness

The Cisco Network Admission Control NAC agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine ISE server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309...

PT-2013-2896

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC agent on Mac OS X affected versions not specified Description The issue concerns the Cisco Network Admission Control NAC agent on Mac OS X, which fails to verify the X.509 certificate of an Identity Services...

Cisco Network Admission Control Manager directory traversal

HTTPS directory traversal...

Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager Advisory ID: cisco-sa-20111005-nac Revision 1.0 For Public Release 2011 October 05 1600 UTC GMT...

PT-2011-4383

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager version 4.8.x Description A directory traversal issue allows remote attackers to read arbitrary files by sending crafted traffic to TCP port 443. Recommendations For Cisco Network Admission Control N...

CVE-2011-3305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Network Admission Control NAC Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755...

CVE-2011-0963

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

CVE-2011-0963: Undefined Security Weakness

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control NAC Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922...

PT-2011-2781

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Guest Server versions prior to 2.0.3 Description The default configuration of the RADIUS authentication feature allows remote attackers to bypass intended access restrictions and obtain network connectivity...

MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability

MIT Kerberos contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is in the GSS-API acceptor component due to lack of pointer validation. An authenticated, remote attacker could exploit the vulnerability by makin...

Cisco Network Admission Control weak encryption

Shared secret is transmitted cleartext over the networkig during logging...

CVE-2008-1155

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...