|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
Cisco Security Agent contains a flaw that may allow a malicious user to bypass buffer overflow protection. The issue is triggered when an attacker sends specially timed attacks. It is possible that the flaw may allow the attacker to bypass protection and execute arbitrary code resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
OSVDB:
Security Software
|
|
Solution |
Upgrade to version 4.0.3 (728) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Cisco Security Agent
 |
3.x |
4.0 |
4.0.1x |
4.0.3 |
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|