CVE Feed

    Dashboard / CVE / CVE-2011-0364

    CVE-2011-0364

    The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

    Published:Feb 18, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 18, 2011
    EPSS Score:0.15536
    CVSS Score:10

    Affected Products

    Vendor
    Cisco
    Product
    Security Agent

    Exploits

    https://www.exploit-db.com/exploits/17155

    Related CVEs

    CVE-2010-0148 (CVSS 7.8) — Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote a…
    CVE-2010-0146 (CVSS 6.8) — Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authent…
    CVE-2010-0147 (CVSS 6.5) — SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 befor…
    CVE-2007-5580 (CVSS 10) — Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 …
    CVE-2007-1068 (CVSS 7.2) — The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCH…
    CVE-2007-1064 (CVSS 6.8) — Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when…
    CVE-2007-1065 (CVSS 6.8) — Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when…
    CVE-2007-1067 (CVSS 7.2) — Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when…
    CVE-2007-1066 (CVSS 6.8) — Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when…
    CVE-2006-5553 (CVSS 7.8) — Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallMan…

    References

    http://secunia.com/advisories/43383
    http://secunia.com/advisories/43393
    http://securityreason.com/securityalert/8095
    http://securityreason.com/securityalert/8197
    http://securityreason.com/securityalert/8205
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
    http://www.securityfocus.com/archive/1/516505/100/0/threaded
    http://www.securityfocus.com/bid/46420
    http://www.securitytracker.com/id?1025088
    http://www.vupen.com/english/advisories/2011/0424
    http://www.zerodayinitiative.com/advisories/ZDI-11-088
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
    http://secunia.com/advisories/43383
    http://secunia.com/advisories/43393
    http://securityreason.com/securityalert/8095
    http://securityreason.com/securityalert/8197
    http://securityreason.com/securityalert/8205
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
    http://www.securityfocus.com/archive/1/516505/100/0/threaded
    http://www.securityfocus.com/bid/46420
    http://www.securitytracker.com/id?1025088
    http://www.vupen.com/english/advisories/2011/0424
    http://www.zerodayinitiative.com/advisories/ZDI-11-088
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65436

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High