CVE-2005-4332

Cisco Clean Access <3.5.5 - Auth Bypass/DoS

Title source: llm
STIX 2.1

Description

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21957
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/3007
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/419645/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21958
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/420008/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15909
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/265
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18103
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21956
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015375

Scores

EPSS 0.0377
EPSS Percentile 88.8%

Details

Status published
Products (22)
cisco/network_admission_control_manager_and_server_system_software 3.3
cisco/network_admission_control_manager_and_server_system_software 3.3.1
cisco/network_admission_control_manager_and_server_system_software 3.3.2
cisco/network_admission_control_manager_and_server_system_software 3.3.3
cisco/network_admission_control_manager_and_server_system_software 3.3.4
cisco/network_admission_control_manager_and_server_system_software 3.3.5
cisco/network_admission_control_manager_and_server_system_software 3.3.6
cisco/network_admission_control_manager_and_server_system_software 3.3.7
cisco/network_admission_control_manager_and_server_system_software 3.3.8
cisco/network_admission_control_manager_and_server_system_software 3.3.9
... and 12 more
Published Dec 17, 2005
Tracked Since Feb 18, 2026