PT-2007-6601 · Cisco · Cisco Security Agent

Published 2007-12-15 · Updated 2018-10-15 · CVE-2007-5580

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Security Agent versions 4.5.1 through 4.5.1.671 Cisco Security Agent versions 5.0 through 5.0.0.224 Cisco Security Agent versions 5.1 through 5.1.0.105 Cisco Security Agent versions 5.2 through 5.2.0.237

Description A buffer overflow issue in a certain driver of Cisco Security Agent allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port 139 or 445.

Recommendations For versions 4.5.1 through 4.5.1.671, update to version 4.5.1.672 or later. For versions 5.0 through 5.0.0.224, update to version 5.0.0.225 or later. For versions 5.1 through 5.1.0.105, update to version 5.1.0.106 or later. For versions 5.2 through 5.2.0.237, update to version 5.2.0.238 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5580

Affected Products

Cisco Security Agent

References · 11

• http://cisco.com/en/US/products/products_security_advisory09186a008090a434.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5580 · Security Note
• http://secunia.com/advisories/27947 · Vendor Advisory
• http://securityfocus.com/archive/1/484669/100/100/threaded · Note
• http://nsfocus.com/english/homepage/research/0702.htm · Note
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsl00618 · Note
• http://securityreason.com/securityalert/3425 · Note
• http://osvdb.org/39521 · Note
• http://securitytracker.com/id?1019046 · Note
• http://vupen.com/english/advisories/2007/4103 · Note
• http://securityfocus.com/bid/26723 · Note