PT-2005-4630 · Cisco · Cisco Security Agent

Published 2005-11-29 · Updated 2011-03-08 · CVE-2005-3886

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Security Agent versions 4.5.0 through 4.5.1

Description The issue allows local users to bypass protections and gain system privileges by executing certain local software.

Recommendations For Cisco Security Agent versions 4.5.0 and 4.5.1, consider restricting access to certain local software until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3886

Affected Products

Cisco Security Agent

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3886 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml · Vendor Advisory
• http://securityfocus.com/bid/15618 · Note
• http://securitytracker.com/id?1015283 · Note
• http://securityreason.com/securityalert/224 · Note
• http://vupen.com/english/advisories/2005/2655 · Note
• http://secunia.com/advisories/17815 · Note