imPC@ndo IT

Tracker / CVE-2008-1155

CVE-2008-1155

High 10.0

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

Affected products and versions

cisco network_admission_control
cisco network_admission_control · … → 3.6.4.3
cisco network_admission_control · … → 4.0.5.1
cisco network_admission_control · … → 4.1.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References