CVE-2011-0364 in Security Agent
Summary
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/07/2011
Disclosure
02/18/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56548 | Cisco Security Agent Management Console webagent.exe code injection | 94 | Proof-of-Concept | Official fix | CVE-2011-0364 |