CVE-2011-3305

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2011-10-06

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Nac Manager (Cisco)

References

• http://osvdb.org/76080
• http://secunia.com/advisories/46309
• http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml
• http://www.securityfocus.com/bid/49954
• http://www.securitytracker.com/id?1026142
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70335