Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0058

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Published

2007-01-04T22:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	network_admission_control_manager_and_server_system_software	≤ 3.5.9	Yes
Application	cisco	network_admission_control_manager_and_server_system_software	≤ 3.6.1.1	Yes

References

http://secunia.com/advisories/23556 Third Party Advisory ([email protected])
http://securitytracker.com/id?1017465 Third Party Advisory, VDB Entry ([email protected])
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Vendor Advisory ([email protected])
http://www.osvdb.org/32579 Broken Link ([email protected])
http://www.vupen.com/english/advisories/2007/0030 Third Party Advisory ([email protected])
http://secunia.com/advisories/23556 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017465 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/32579 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0030 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)