CVE-2004-1112 in Security Agent
Summary
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
11/30/2004
Disclosure
01/10/2005
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 990 | Cisco Security Agent memory corruption | 119 | Not defined | Official fix | CVE-2004-1112 |