Vulnerability in Cisco Network Admission Control Manager And Server System Software

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

EPSS: 0.006 (45.4th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Vendor Advisory)
  • cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)