CVE-2007-5580 Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute a...
HighCVSS 10.0
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco security agent | = 2.1 | No fix listed |
| cisco security agent | = 3 | No fix listed |
| cisco security agent | = 4.0 | No fix listed |
| cisco security agent | = 4.0.1 | No fix listed |
| cisco security agent | = 4.0.2 | No fix listed |
| cisco security agent | = 4.0.3 | No fix listed |
| cisco security agent | = 4.0.3.728 | No fix listed |
| cisco security agent | = 4.5 | No fix listed |
| cisco security agent | = 4.5.1 | No fix listed |
| cisco security agent | = 4.5.1.639 | No fix listed |
| cisco security agent | = 4.5.1.657 | No fix listed |
| cisco security agent | = 4.5.1.659 | No fix listed |
| cisco security agent | = 5.0 | No fix listed |
| cisco security agent | = 5.0.0.201 | No fix listed |
| cisco security agent | = 5.0.193 | No fix listed |
| cisco security agent | = 5.1 | No fix listed |
| cisco security agent | = 5.1.79 | No fix listed |
| cisco security agent | = 5.2 | No fix listed |
References
- 39521 vdb-entry
- 27947 third-party-advisory vendor-advisory
- 3425 third-party-advisory
- tools.cisco.com
- 20071205 Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability vendor-advisory
- www.nsfocus.com
- 20071206 NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability mailing-list
- 26723 vdb-entry
- 1019046 vdb-entry
- ADV-2007-4103 vdb-entry