Cisco Network Admission Control (CVE-2011-3305) Directory Traversal Vulnerability
BID:49954
Info
Cisco Network Admission Control (CVE-2011-3305) Directory Traversal Vulnerability
| Bugtraq ID: | 49954 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-3305 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 05 2011 12:00AM |
| Updated: | Oct 05 2011 12:00AM |
| Credit: | Nenad Stojanovski |
| Vulnerable: |
Cisco Network Admission Control 4.8.2 Cisco Network Admission Control 4.8.1 Cisco Network Admission Control 4.8.0 |
| Not Vulnerable: |
Cisco Network Admission Control 4.9 |
Discussion
Cisco Network Admission Control (CVE-2011-3305) Directory Traversal Vulnerability
Cisco Network Admission Control (NAC) is prone to a directory-traversal vulnerability.
Exploiting this issue will allow an attacker to access sensitive information, including password files and system logs. This could help the attacker launch further attacks.
This issue is tracked by Cisco BugID CSCtq10755.
Cisco Network Admission Control (NAC) is prone to a directory-traversal vulnerability.
Exploiting this issue will allow an attacker to access sensitive information, including password files and system logs. This could help the attacker launch further attacks.
This issue is tracked by Cisco BugID CSCtq10755.