PT-2005-5486 · Cisco · Cisco Clean Access

Published 2005-12-31 · Updated 2018-10-30 · CVE-2005-4825

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Clean Access versions 3.5.5 and earlier

Description The issue allows remote attackers to bypass authentication, cause a denial of service due to disk consumption, or make unauthorized files accessible by uploading files through requests to certain JSP scripts.

Recommendations For Cisco Clean Access versions 3.5.5 and earlier, consider restricting access to the JSP scripts until a fix is available. As a temporary workaround, limit the ability to upload files to prevent unauthorized access and denial of service.

Fix

Related Identifiers

CVE-2005-4825

Affected Products

Cisco Clean Access

References · 4

• http://osvdb.org/21959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4825 · Security Note
• http://cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml · Vendor Advisory
• http://securityfocus.com/archive/1/419645/30/0/threaded · Vendor Advisory