PT-2008-2749 · Cisco · Cisco Network Admission Control Appliance+2

Publicado 2008-04-16 · Atualizado 2017-08-08 · CVE-2008-1155

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control (NAC) Appliance versions 3.5.x through 3.6.3, versions 4.0.x through 4.0.5, and versions 4.1.x through 4.1.1

Description The issue allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

Recommendations For versions 3.5.x, update to version 3.6.4.4 or later. For versions 3.6.x before 3.6.4.4, update to version 3.6.4.4 or later. For versions 4.0.x before 4.0.6, update to version 4.0.6 or later. For versions 4.1.x before 4.1.2, update to version 4.1.2 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-1155

Produtos afetados

Cisco Network Admission Control Appliance

Clean Access Manager

Clean Access Server

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-1155 · Nota de Segurança
• http://secunia.com/advisories/29822 · Aviso do Fabricante
• http://securitytracker.com/id?1019859 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/1248/references · Nota
• http://securityfocus.com/bid/28807 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41849 · Nota