cisco security agent 5.2 vulnerabilities and exploits

(subscribe to this query)

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 prior to 6.0.2.145 allows remote malicious users to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Cisco Security Agent 5.1 Cisco Security Agent 5.2 Cisco Security Agent 6.0

1 EDB exploit

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 prior to 4.5.1.672, 5.0 prior to 5.0.0.225, 5.1 prior to 5.1.0.106, and 5.2 prior to 5.2.0.238 on Windows allows remote malicious users to execute arbitrary code via a crafted SMB packet in a TCP session on port (1...

Cisco Security Agent 2.1 Cisco Security Agent 3 Cisco Security Agent 4.0 Cisco Security Agent 4.0.1 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.3.728 Cisco Security Agent 4.5 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5.1.639 Cisco Security Agent 4.5.1.657 Cisco Security Agent 4.5.1.659

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 prior to 5.1.0.117, 5.2 prior to 5.2.0.296, and 6.0 prior to 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Cisco Security Agent 5.1 Cisco Security Agent 5.2 Cisco Security Agent 6.0

Unspecified vulnerability in Cisco Security Agent 5.2 prior to 5.2.0.285, when running on Linux, allows remote malicious users to cause a denial of service (kernel panic) via "a series of TCP packets."

Cisco Security Agent 5.2

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.

Cisco Security Agent 6.0

The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote malicious users to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the...

Columbia University Sipc 1.74

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x prior to 5.2.4.1, 5.3.x prior to 5.3.2.1, and 5.4.x prior to 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 up to and including 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3R...

Juniper Session And Resource Control 1.0 Juniper Session And Resource Control 2.0 Juniper Src Pe 1.0 Juniper Src Pe 2.0

1 EDB exploit

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...

Openssl Openssl 1.0.1j

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10

1 Github repository

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d

1 Article

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook