Published: 19/02/2011 Updated: 10/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 prior to 6.0.2.145 allows remote malicious users to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco security agent 5.2
cisco security agent 6.0
cisco security agent 5.1

The Management Center for Cisco Security Agent is affected by a vulnerability that may allow an unauthenticated attacker to perform remote code execution on the affected device Cisco has released software updates that address this vulnerability A workaround is available to mitigate this vulnerability This advisory is posted at ...

#!/usr/bin/env python # Exploits Cisco Security Agent Management Console ‘st_upload’ (CVE-2011-0364) # gerry eisenhaur <gerryeisenhaur _at_ gmailcom> import httplib import mimetools import StringIO _boundary = mimetoolschoose_boundary() _host_uid = 'C087EFAE-05A2-4A0B-9512-E05E5ED84AEB' _csamc = "1921680108" # we need to enable s ...

Cisco Security Agent Management Console st_upload remote command execution exploit ...

CWE-94 http://www.securityfocus.com/bid/46420 http://www.zerodayinitiative.com/advisories/ZDI-11-088 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml http://secunia.com/advisories/43393 http://www.securitytracker.com/id?1025088 http://www.vupen.com/english/advisories/2011/0424 http://secunia.com/advisories/43383 http://securityreason.com/securityalert/8095 http://securityreason.com/securityalert/8197 http://securityreason.com/securityalert/8205 https://exchange.xforce.ibmcloud.com/vulnerabilities/65436 http://www.securityfocus.com/archive/1/516505/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/17155/http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110216-csa

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-0364

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect