high7.8
CVE-2007-0058
Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and d…
Impact
Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Network Admission Control Manager And Server System Software | from 3.5.0 through 3.5.9 from 3.6.0.0 through 3.6.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23556
- http://securitytracker.com/id?1017465
- http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
- http://www.osvdb.org/32579
- http://www.vupen.com/english/advisories/2007/0030
- http://secunia.com/advisories/23556
- http://securitytracker.com/id?1017465
- http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
- http://www.osvdb.org/32579
- http://www.vupen.com/english/advisories/2007/0030