PT-2011-2293 · Cisco · Cisco Security Agent

Gerry Eisenhaur · Publicado 2011-02-16 · Atualizado 2018-10-10 · CVE-2011-0364

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Security Agent versions 5.1 through 6.0 before 6.0.2.145 Cisco Security Agent version 6.0 before 6.0.2.145

Description The issue allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted "st upload" request.

Recommendations For Cisco Security Agent versions 5.1 through 6.0 before 6.0.2.145, update to version 6.0.2.145 or later to resolve the issue. For Cisco Security Agent version 6.0 before 6.0.2.145, update to version 6.0.2.145 or later to resolve the issue.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-0364

ZDI-11-088

Produtos afetados

Cisco Security Agent

Referências · 15

• 🔥 https://exploit-db.com/exploits/17155 · Exploit
• http://securityfocus.com/bid/46420 · Nota
• http://securityreason.com/securityalert/8197 · Nota
• http://securityfocus.com/archive/1/516505/100/0/threaded · Nota
• http://zerodayinitiative.com/advisories/ZDI-11-088 · Nota
• http://secunia.com/advisories/43393 · Aviso do Fabricante
• http://securitytracker.com/id?1025088 · Nota
• https://zerodayinitiative.com/advisories/ZDI-11-088 · Nota de Segurança
• http://securityreason.com/securityalert/8205 · Nota
• http://vupen.com/english/advisories/2011/0424 · Aviso do Fabricante
• http://secunia.com/advisories/43383 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65436 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0364 · Nota de Segurança
• http://securityreason.com/securityalert/8095 · Nota