Description (CNA)
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securityreason.com/securityalert/8197
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
- http://www.securitytracker.com/id?1025088
- http://www.zerodayinitiative.com/advisories/ZDI-11-088
- http://www.securityfocus.com/archive/1/516505/100/0/threaded
- http://securityreason.com/securityalert/8205
- http://secunia.com/advisories/43383
- http://securityreason.com/securityalert/8095
- http://www.securityfocus.com/bid/46420
- http://www.vupen.com/english/advisories/2011/0424
- http://secunia.com/advisories/43393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
ADP enrichment
No English description supplied.
- http://securityreason.com/securityalert/8197
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
- http://www.securitytracker.com/id?1025088
- http://www.zerodayinitiative.com/advisories/ZDI-11-088
- http://www.securityfocus.com/archive/1/516505/100/0/threaded
- http://securityreason.com/securityalert/8205
- http://secunia.com/advisories/43383
- http://securityreason.com/securityalert/8095
- http://www.securityfocus.com/bid/46420
- http://www.vupen.com/english/advisories/2011/0424
- http://secunia.com/advisories/43393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65436