Description
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
References
- 11659 vdb-entry
- csa-buffer-protection-bypass(18037) vdb-entry
- 20041111 Crafted Timed Attack Evades Cisco Security Agent Protections vendor-advisory
- P-036 third-party-advisory government-resource