Cisco NAC Agent Installation Security Bypass Vulnerability

Bugtraq ID:	19726
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2006 12:00AM
Updated:	Sep 04 2006 06:48PM
Credit:	This issue was disclosed by Andreas Gal and Joachim Feise.
Vulnerable:	Cisco Cisco Clean Access (CCA) 3.6.4 .0.1 Cisco Cisco Clean Access (CCA) 3.6 .0.1 Cisco Cisco Clean Access (CCA) 3.5.5 Cisco Cisco Clean Access (CCA) 3.5.4 Cisco Cisco Clean Access (CCA) 3.5.3 Cisco Cisco Clean Access (CCA) 3.5.2 Cisco Cisco Clean Access (CCA) 3.5.1 Cisco Cisco Clean Access (CCA) 3.5 (9) Cisco Cisco Clean Access (CCA) 3.5 Cisco Cisco Clean Access (CCA) 3.4.5 Cisco Cisco Clean Access (CCA) 3.4.4 Cisco Cisco Clean Access (CCA) 3.4.3 Cisco Cisco Clean Access (CCA) 3.4.2 Cisco Cisco Clean Access (CCA) 3.4.1 Cisco Cisco Clean Access (CCA) 3.4 Cisco Cisco Clean Access (CCA) 3.3.9 Cisco Cisco Clean Access (CCA) 3.3.8 Cisco Cisco Clean Access (CCA) 3.3.7 Cisco Cisco Clean Access (CCA) 3.3.6 Cisco Cisco Clean Access (CCA) 3.3.5 Cisco Cisco Clean Access (CCA) 3.3.4 Cisco Cisco Clean Access (CCA) 3.3.3 Cisco Cisco Clean Access (CCA) 3.3.2 Cisco Cisco Clean Access (CCA) 3.3.1 Cisco Cisco Clean Access (CCA) 3.3
Not Vulnerable:

Cisco NAC Agent Installation Security Bypass Vulnerability

The Cisco NAC Agent is prone to a security-bypass vulnerability because of a design error in the application.

An attacker can exploit this issue to bypass security restrictions. This results in a false sense of security and may aid attackers in further attacks.

Cisco NAC Agent Installation Security Bypass Vulnerability

Attackers can exploit this issue with a custom HTTPS client and a modified version of the TCP/IP stack.

Cisco NAC Agent Installation Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Cisco NAC Agent Installation Security Bypass Vulnerability

References:

• Cisco NAC Appliance (Clean Access) Web Site (Cisco)
  
• Cisco Security Response: NAC Agent Installation Bypass (Cisco)
  
• Cisco NAC Appliance Agent Installation Bypass Vulnerability (Andreas Gal )
  
• Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Eloy Paris )
  
• Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Joe Feise )