CVEvulnerability
CVE-2011-3305
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.
Affected configurations
• cisco nac manager 4.8
• cisco nac manager 4.8\(1\)
• cisco nac manager 4.8\(2\)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/76080 osvdb.org
- http://secunia.com/advisories/46309 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml Vendor Advisory
- http://www.securityfocus.com/bid/49954 www.securityfocus.com
- http://www.securitytracker.com/id?1026142 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70335 exchange.xforce.ibmcloud.com
- http://osvdb.org/76080 osvdb.org
- http://secunia.com/advisories/46309 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml Vendor Advisory
- http://www.securityfocus.com/bid/49954 www.securityfocus.com
- http://www.securitytracker.com/id?1026142 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70335 exchange.xforce.ibmcloud.com