CVE-2008-1155

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

🔗 References (12)

• psirt@ciscohttp://secunia.com/advisories/29822
• psirt@ciscohttp://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml
• psirt@ciscohttp://www.securityfocus.com/bid/28807
• psirt@ciscohttp://www.securitytracker.com/id?1019859
• psirt@ciscohttp://www.vupen.com/english/advisories/2008/1248/references
• psirt@ciscohttps://exchange.xforce.ibmcloud.com/vulnerabilities/41849
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29822
• af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/28807
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1019859
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/1248/references
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/41849