CVE-2007-0058

Currently unrated

Key Information:

Vendor
Cisco
Status
Network Admission Control Manager And Server System Software
Vendor
CVE Published:
4 January 2007

Summary

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

References

http://secunia.com/advisories/23556
third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/32579
vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2007/0030
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.