76080vdb entry
http://osvdb.org/76080 CVE-2011-3305
Cisco Network Access Manager Directory Traversal Vulnerability
Record summary
CVE-2011-3305 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
MetasploitCisco Network Access Manager Directory Traversal VulnerabilityMetasploit auxiliary PoCby Nenad Stojanovski <nenad.stojanovski@gmail.com>Not analyzed1 file
References
746309Third-party advisory
http://secunia.com/advisories/46309 20111005 Directory Traversal Vulnerability in Cisco Network Admission Control ManagerVendor advisory
http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml 49954vdb entry
http://www.securityfocus.com/bid/49954 1026142vdb entry
http://www.securitytracker.com/id?1026142 cisco-nac-directory-traversal(70335)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/70335 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-3305