CVEvulnerability
CVE-2004-1112
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
Affected configurations
• cisco security agent 3
• cisco security agent 4.0
• cisco security agent 4.0.1
• cisco security agent 4.0.2
• cisco security agent 4.0.3
• okena stormwatch 3.x
References
- http://www.ciac.org/ciac/bulletins/p-036.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml Vendor Advisory
- http://www.securityfocus.com/bid/11659 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18037 exchange.xforce.ibmcloud.com
- http://www.ciac.org/ciac/bulletins/p-036.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml Vendor Advisory
- http://www.securityfocus.com/bid/11659 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18037 exchange.xforce.ibmcloud.com