cisco security agent management center 5.1 vulnerabilities and exploits

(subscribe to this query)

Cisco Security Agent Management Center (CSAMC) 5.1 prior to 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote malicious users to bypass authentication requirements via an empty password when using an external LDAP server.

Cisco Security Agent Management Center 5.1

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 prior to 6.0.2.145 allows remote malicious users to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Cisco Security Agent 5.2 Cisco Security Agent 6.0 Cisco Security Agent 5.1

1 EDB exploit

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 prior to 5.1.0.117, 5.2 prior to 5.2.0.296, and 6.0 prior to 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Cisco Security Agent 6.0 Cisco Security Agent 5.1 Cisco Security Agent 5.2

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.

Cisco Security Agent 6.0

Unspecified vulnerability in Cisco Security Agent 5.2 prior to 5.2.0.285, when running on Linux, allows remote malicious users to cause a denial of service (kernel panic) via "a series of TCP packets."

Cisco Security Agent 5.2

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x up to and including 2.0.64, and 2.2.x up to and including 2.2.19 allows remote malicious users to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as e...

Apache Http Server Suse Linux Enterprise Server 11 Opensuse Opensuse 11.4 Opensuse Opensuse 11.3 Suse Linux Enterprise Software Development Kit 10 Suse Linux Enterprise Server 10 Suse Linux Enterprise Software Development Kit 11 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04

2 EDB exploits1 Nmap script18 Github repositories3 Articles

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1151 Github repositories28 Articles

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...

1 Github repository1 Article

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with...

192 Github repositories9 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook