CVE-2004-1112

Cisco Security Agent < 4.0.3 build 728 - Buffer Overflow Protection Bypass via Timeout Exploitation

Title source: llm
STIX 2.1

Description

The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11659
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18037
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml
Vendor Advisory third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/p-036.shtml

Scores

EPSS 0.0150
EPSS Percentile 71.6%

Details

Status published
Products (6)
cisco/security_agent 3
cisco/security_agent 4.0
cisco/security_agent 4.0.1
cisco/security_agent 4.0.2
cisco/security_agent 4.0.3
okena/stormwatch 3.x
Published Jan 10, 2005
Tracked Since Feb 18, 2026