PT-2010-1963 · Cisco · Cisco Security Agent

Published 2010-02-23 · Updated 2017-08-17 · CVE-2010-0148

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Security Agent version 5.2 before 5.2.0.285

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic, by sending a series of TCP packets. This occurs when Cisco Security Agent is running on Linux.

Recommendations For Cisco Security Agent version 5.2 before 5.2.0.285, update to version 5.2.0.285 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0148

Affected Products

Cisco Security Agent

References · 8

• http://cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0148 · Security Note
• http://vupen.com/english/advisories/2010/0416 · Vendor Advisory
• http://secunia.com/advisories/38619 · Vendor Advisory
• http://osvdb.org/62445 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56347 · Note
• http://securitytracker.com/id?1023607 · Note
• http://securityfocus.com/bid/38273 · Note