CVE-2007-0058 | BDVDB-2026-21330 Detail

Description#

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/23556
http://www.osvdb.org/32579
http://www.vupen.com/english/advisories/2007/0030
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
http://securitytracker.com/id?1017465

Exploit#

No public exploit known

History#

Version 12007-01-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.