exploits , vulnerabilities , articles , Cisco NAC Agent Installation Security Bypass Vulnerability

Title	Cisco NAC Agent Installation Security Bypass Vulnerability
Published	2006-08-26-12:00AM
Updated	2006-08-26-12:00AM
Class	Design Error
CVE
Remote	Yes
Local	No
Credit	This issue was disclosed by Andreas Gal and Joachim Feise.
Vulnerable	Cisco Cisco Clean Access (CCA) 3.6.4 .0.1 Cisco Cisco Clean Access (CCA) 3.6 .0.1 Cisco Cisco Clean Access (CCA) 3.5.5 Cisco Cisco Clean Access (CCA) 3.5.4 Cisco Cisco Clean Access (CCA) 3.5.3 Cisco Cisco Clean Access (CCA) 3.5.2 Cisco Cisco Clean Access (CCA) 3.5.1 Cisco Cisco Clean Access (CCA) 3.5 (9) Cisco Cisco Clean Access (CCA) 3.5 Cisco Cisco Clean Access (CCA) 3.4.5 Cisco Cisco Clean Access (CCA) 3.4.4 Cisco Cisco Clean Access (CCA) 3.4.3 Cisco Cisco Clean Access (CCA) 3.4.2 Cisco Cisco Clean Access (CCA) 3.4.1 Cisco Cisco Clean Access (CCA) 3.4 Cisco Cisco Clean Access (CCA) 3.3.9 Cisco Cisco Clean Access (CCA) 3.3.8 Cisco Cisco Clean Access (CCA) 3.3.7 Cisco Cisco Clean Access (CCA) 3.3.6 Cisco Cisco Clean Access (CCA) 3.3.5 Cisco Cisco Clean Access (CCA) 3.3.4 Cisco Cisco Clean Access (CCA) 3.3.3 Cisco Cisco Clean Access (CCA) 3.3.2 Cisco Cisco Clean Access (CCA) 3.3.1 Cisco Cisco Clean Access (CCA) 3.3
Not Vulnerable
Code	This issue can be exploited with a custom HTTPS client, and a modified version of the TCP/IP stack.
TXT