Podatność CVE-2011-0364

Podatność CVE-2011-0364

Publikacja: 2011-02-18 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
High	Cisco Security Agent Management st_upload Remote Code Execution Vulnerability	ZDI	22.02.2011
High	Cisco Security Agent Web Management Interface Bug Lets Remote Users Execute Arbitrary Code	Gerry Eisenhaur	14.04.2011
High	Cisco Security Agent Management Console	Gerry Eisenhaur	20.04.2011

Typ:

(Improper Control of Generation of Code ('Code Injection'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
10/10	10/10	10/10

Affected software
Cisco -> Security agent

http://securityreason.com/securityalert/8095

http://securityreason.com/securityalert/8197

http://securityreason.com/securityalert/8205

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml

http://www.securityfocus.com/archive/1/516505/100/0/threaded

http://www.securityfocus.com/bid/46420

http://www.securitytracker.com/id?1025088

http://www.vupen.com/english/advisories/2011/0424

http://www.zerodayinitiative.com/advisories/ZDI-11-088

https://exchange.xforce.ibmcloud.com/vulnerabilities/65436