CVE-2005-4332 Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP file...
HighCVSS 9.4
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco network admission control manager and server system software | = 3.3 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.1 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.2 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.3 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.4 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.5 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.6 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.7 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.8 | No fix listed |
| cisco network admission control manager and server system software | = 3.3.9 | No fix listed |
| cisco network admission control manager and server system software | = 3.4 | No fix listed |
| cisco network admission control manager and server system software | = 3.4.1 | No fix listed |
| cisco network admission control manager and server system software | = 3.4.2 | No fix listed |
| cisco network admission control manager and server system software | = 3.4.3 | No fix listed |
| cisco network admission control manager and server system software | = 3.4.4 | No fix listed |
| cisco network admission control manager and server system software | = 3.4.5 | No fix listed |
| cisco network admission control manager and server system software | = 3.5 | No fix listed |
| cisco network admission control manager and server system software | = 3.5.1 | No fix listed |
| cisco network admission control manager and server system software | = 3.5.2 | No fix listed |
| cisco network admission control manager and server system software | = 3.5.3 | No fix listed |
| cisco network admission control manager and server system software | = 3.5.4 | No fix listed |
| cisco network admission control manager and server system software | = 3.5.5 | No fix listed |
References
- 18103 third-party-advisory
- 265 third-party-advisory
- 1015375 vdb-entry
- www.awarenetwork.org vendor-advisory
- 20051221 Response to DoS in Cisco Clean Access vendor-advisory
- 21956 vdb-entry
- 21957 vdb-entry
- 21958 vdb-entry
- 20051216 DoS in Cisco Clean Access mailing-list
- 20051221 Cisco Security Response: DoS in Cisco Clean Access mailing-list
- 15909 vdb-entry
- ADV-2005-3007 vdb-entry