5.1

CVE-2004-1112

The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Security Agent Version 3
Cisco ≫ Security Agent Version 4.0
Cisco ≫ Security Agent Version 4.0.1
Cisco ≫ Security Agent Version 4.0.2
Cisco ≫ Security Agent Version 4.0.3
Okena ≫ Stormwatch Version 3.x
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.5% 0.71
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ciac.org/ciac/bulletins/p-036.shtml
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml
Vendor Advisory
http://www.securityfocus.com/bid/11659
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18037