Vulnerability Details CVE-2005-4825
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.3%
CVSS Severity
CVSS v2 Score 5.7
References
- http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml
- http://www.osvdb.org/21959
- http://www.securityfocus.com/archive/1/419645/30/0/threaded
- http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml
- http://www.osvdb.org/21959
- http://www.securityfocus.com/archive/1/419645/30/0/threaded
Products affected by CVE-2005-4825
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5(9)
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4
-
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5