CVE-2005-3886 - Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Wind

CVE-2005-3886

Summary

Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certain local software.

References

http://secunia.com/advisories/17815
http://securityreason.com/securityalert/224
http://securitytracker.com/id?1015283
http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml
http://www.securityfocus.com/bid/15618
http://www.vupen.com/english/advisories/2005/2655

Vulnerable Configurations

cpe:2.3:a:cisco:security_agent:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:security_agent:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:security_agent:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:security_agent:4.5.1:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 08-03-2011 - 02:27)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	15618
cisco	20051129 Cisco Security Agent Vulnerable to Privilege Escalation
sectrack	1015283
secunia	17815
sreason	224
vupen	ADV-2005-2655

Last major update

08-03-2011 - 02:27

Published

29-11-2005 - 20:03

Last modified

08-03-2011 - 02:27