Buffer Overflow Vulnerability in Cisco Security Agent by Cisco

CVE-2004-1112

Summary

A buffer overflow vulnerability exists in Cisco Security Agent prior to version 4.0.3 build 728, which can be exploited by remote attackers. The vulnerability is triggered when the process waits for a user response for up to five minutes, allowing attackers to send additional malicious payloads during this interval and potentially bypass the protective measures in place. This loophole poses significant risks to system integrity and security as it undermines the intended buffer overflow protection mechanisms.

References