cisco security agent 5.1 vulnerabilities and exploits

(subscribe to this query)

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 prior to 6.0.2.145 allows remote malicious users to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Cisco Security Agent 5.1 Cisco Security Agent 5.2 Cisco Security Agent 6.0

1 EDB exploit

Cisco Security Agent Management Center (CSAMC) 5.1 prior to 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote malicious users to bypass authentication requirements via an empty password when using an external LDAP server.

Cisco Security Agent Management Center 5.1

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 prior to 4.5.1.672, 5.0 prior to 5.0.0.225, 5.1 prior to 5.1.0.106, and 5.2 prior to 5.2.0.238 on Windows allows remote malicious users to execute arbitrary code via a crafted SMB packet in a TCP session on port (1...

Cisco Security Agent 2.1 Cisco Security Agent 3 Cisco Security Agent 4.0 Cisco Security Agent 4.0.1 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.3.728 Cisco Security Agent 4.5 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5.1.639 Cisco Security Agent 4.5.1.657 Cisco Security Agent 4.5.1.659

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges ...

Cisco Secure Services Client 4.x Cisco Security Agent 5.0 Cisco Security Agent 5.1 Cisco Trust Agent 1 Meetinghouse Aegis Secureconnect Client Windows Platform

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invok...

Cisco Secure Services Client 4.0 Cisco Secure Services Client 4.0.5 Cisco Secure Services Client 4.0.51 Cisco Security Agent 5.0 Cisco Security Agent 5.1 Cisco Trust Agent 1.0 Cisco Trust Agent 2.0 Cisco Trust Agent 2.0.1 Cisco Trust Agent 2.1 Meetinghouse Aegis Secureconnect Client Windows Platform

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the ...

Cisco Secure Services Client 4.0 Cisco Secure Services Client 4.0.5 Cisco Secure Services Client 4.0.51 Cisco Security Agent 5.0 Cisco Security Agent 5.1 Cisco Trust Agent 1.0 Cisco Trust Agent 2.0 Cisco Trust Agent 2.0.1 Cisco Trust Agent 2.1 Meetinghouse Aegis Secureconnect Client Windows Platform

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the co...

Cisco Secure Services Client 4.0 Cisco Secure Services Client 4.0.5 Cisco Secure Services Client 4.0.51 Cisco Security Agent 5.0 Cisco Security Agent 5.1 Cisco Trust Agent 1.0 Cisco Trust Agent 2.0 Cisco Trust Agent 2.0.1 Cisco Trust Agent 2.1 Meetinghouse Aegis Secureconnect Client Windows Platform

The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when...

Cisco Secure Services Client 4.0 Cisco Secure Services Client 4.0.5 Cisco Secure Services Client 4.0.51 Cisco Security Agent 5.0 Cisco Security Agent 5.1 Cisco Trust Agent 1.0 Cisco Trust Agent 2.0 Cisco Trust Agent 2.0.1 Cisco Trust Agent 2.1 Meetinghouse Aegis Secureconnect Client Windows Platform

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 prior to 5.1.0.117, 5.2 prior to 5.2.0.296, and 6.0 prior to 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Cisco Security Agent 5.1 Cisco Security Agent 5.2 Cisco Security Agent 6.0

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.

Cisco Security Agent 6.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook