NVD Vulnerability Detail

CVE-2011-0364

Summary	The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Publication Date	Feb. 19, 2011, 10 a.m.
Registration Date	Jan. 28, 2021, 4:37 p.m.
Last Update	Nov. 21, 2024, 10:23 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://secunia.com/advisories/43383	Vendor Advisory
2	http://secunia.com/advisories/43393	Vendor Advisory
3	http://securityreason.com/securityalert/8095
4	http://securityreason.com/securityalert/8197
5	http://securityreason.com/securityalert/8205
6	http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml	Vendor Advisory
7	http://www.securityfocus.com/archive/1/516505/100/0/threaded
8	http://www.securityfocus.com/bid/46420
9	http://www.securitytracker.com/id?1025088
10	http://www.vupen.com/english/advisories/2011/0424	Vendor Advisory
11	http://www.zerodayinitiative.com/advisories/ZDI-11-088
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
13	http://secunia.com/advisories/43383	Vendor Advisory
14	https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
15	http://www.zerodayinitiative.com/advisories/ZDI-11-088
16	http://www.vupen.com/english/advisories/2011/0424	Vendor Advisory
17	http://www.securitytracker.com/id?1025088
18	http://www.securityfocus.com/bid/46420
19	http://www.securityfocus.com/archive/1/516505/100/0/threaded
20	http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml	Vendor Advisory
21	http://securityreason.com/securityalert/8205
22	http://securityreason.com/securityalert/8197
23	http://securityreason.com/securityalert/8095
24	http://secunia.com/advisories/43393	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-94	コード・インジェクション	https://cwe.mitre.org/data/definitions/94.html

JVN Vulnerability Information

Cisco Security Agent の Management Console における任意のファイルを作られる脆弱性

Title	Cisco Security Agent の Management Console における任意のファイルを作られる脆弱性
Summary	Cisco Security Agent の Management Console (webagent.exe) には、任意のファイルを作られる、および任意のコードを実行される脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工された st_upload リクエストの詳細不明のパラメータを介して、任意のファイルを作られる、および任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 16, 2011, midnight
Registration Date	Nov. 29, 2011, 9:48 a.m.
Last Update	Nov. 29, 2011, 9:48 a.m.

Affected System

シスコシステムズ

Cisco Security Agent 5.1

Cisco Security Agent 5.2

Cisco Security Agent 6.0.2.145 未満の 6.0

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-0364	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0364
National Vulnerability Database (NVD)
2	CVE-2011-0364	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0364

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-94	https://jvndb.jvn.jp/ja/cwe/CWE-94.html

ベンダー情報

No	Name	URL
Cisco Security Advisory
1	cisco-sa-20110216-csa	http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
シスコセキュリティアドバイザリ
2	cisco-sa-20110216-csa	http://www.cisco.com/cisco/web/support/JP/110/1103/1103931_cisco-sa-20110216-csa-j.html

Change Log

No	Changed Details	Date of change
0	[2011年11月29日] 掲載	Feb. 17, 2018, 10:37 a.m.