Description
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.
References (3)
Core 3
Core References
Vendor Advisory mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/419645/30/0/threaded
Vendor Advisory vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21959
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml
Scores
EPSS
0.0060
EPSS Percentile
45.3%
Details
Status
published
Products (7)
cisco/network_admission_control_manager_and_server_system_software
3.5
cisco/network_admission_control_manager_and_server_system_software
3.5\(9\)
cisco/network_admission_control_manager_and_server_system_software
3.5.1
cisco/network_admission_control_manager_and_server_system_software
3.5.2
cisco/network_admission_control_manager_and_server_system_software
3.5.3
cisco/network_admission_control_manager_and_server_system_software
3.5.4
cisco/network_admission_control_manager_and_server_system_software
3.5.5
Published
Dec 31, 2005
Tracked Since
Feb 18, 2026