Description
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp.
References
- ADV-2005-3007 vdb-entry
- 20051216 DoS in Cisco Clean Access mailing-list
- 21957 vdb-entry
- http://www.awarenetwork.org/forum/viewtopic.php?p=2236
- 20051221 Response to DoS in Cisco Clean Access vendor-advisory
- 21958 vdb-entry
- 20051221 Cisco Security Response: DoS in Cisco Clean Access mailing-list
- 15909 vdb-entry
- 265 third-party-advisory
- 18103 third-party-advisory
- 21956 vdb-entry
- 1015375 vdb-entry