CVE-2011-0364 The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters...
HighCVSS 10.0
EPSS 19.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco security agent | = 5.1 | No fix listed |
| cisco security agent | = 5.2 | No fix listed |
| cisco security agent | = 6.0 | No fix listed |
References
- 43383 third-party-advisory vendor-advisory
- 43393 third-party-advisory vendor-advisory
- 8095 third-party-advisory
- 8197 third-party-advisory
- 8205 third-party-advisory
- 20110216 Management Center for Cisco Security Agent Remote Code Execution Vulnerability vendor-advisory
- 20110217 ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability mailing-list
- 46420 vdb-entry
- 1025088 vdb-entry
- ADV-2011-0424 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- cisco-security-webagent-file-upload(65436) vdb-entry