Lucene search

CiscoCVE-2007-5580

HistoryDec 15, 2007 - 1:46 a.m.

CVE-2007-5580

2007-12-1501:46:00

CWE-119

cisco

web.nvd.nist.gov

cve

2007

5580

buffer overflow

cisco security agent

smb

tcp

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.186

Percentile

96.3%

JSON

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.

Affected configurations

Nvd

Node

ciscosecurity_agentMatch2.1

ciscosecurity_agentMatch3

ciscosecurity_agentMatch4.0

ciscosecurity_agentMatch4.0.1

ciscosecurity_agentMatch4.0.2

ciscosecurity_agentMatch4.0.3

ciscosecurity_agentMatch4.0.3.728

ciscosecurity_agentMatch4.5

ciscosecurity_agentMatch4.5.1

ciscosecurity_agentMatch4.5.1.639

ciscosecurity_agentMatch4.5.1.657

ciscosecurity_agentMatch4.5.1.659

ciscosecurity_agentMatch5.0

ciscosecurity_agentMatch5.0.0.201

ciscosecurity_agentMatch5.0.193

ciscosecurity_agentMatch5.1

ciscosecurity_agentMatch5.1.79

ciscosecurity_agentMatch5.2

VendorProductVersionCPE
ciscosecurity_agent2.1cpe:2.3:a:cisco:security_agent:2.1:*:*:*:*:*:*:*
ciscosecurity_agent3cpe:2.3:a:cisco:security_agent:3:*:*:*:*:*:*:*
ciscosecurity_agent4.0cpe:2.3:a:cisco:security_agent:4.0:*:*:*:*:*:*:*
ciscosecurity_agent4.0.1cpe:2.3:a:cisco:security_agent:4.0.1:*:*:*:*:*:*:*
ciscosecurity_agent4.0.2cpe:2.3:a:cisco:security_agent:4.0.2:*:*:*:*:*:*:*
ciscosecurity_agent4.0.3cpe:2.3:a:cisco:security_agent:4.0.3:*:*:*:*:*:*:*
ciscosecurity_agent4.0.3.728cpe:2.3:a:cisco:security_agent:4.0.3.728:*:*:*:*:*:*:*
ciscosecurity_agent4.5cpe:2.3:a:cisco:security_agent:4.5:*:*:*:*:*:*:*
ciscosecurity_agent4.5.1cpe:2.3:a:cisco:security_agent:4.5.1:*:*:*:*:*:*:*
ciscosecurity_agent4.5.1.639cpe:2.3:a:cisco:security_agent:4.5.1.639:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	security_agent	2.1	cpe:2.3:a:cisco:security_agent:2.1:::::::*
cisco	security_agent	3	cpe:2.3:a:cisco:security_agent:3:::::::*
cisco	security_agent	4.0	cpe:2.3:a:cisco:security_agent:4.0:::::::*
cisco	security_agent	4.0.1	cpe:2.3:a:cisco:security_agent:4.0.1:::::::*
cisco	security_agent	4.0.2	cpe:2.3:a:cisco:security_agent:4.0.2:::::::*
cisco	security_agent	4.0.3	cpe:2.3:a:cisco:security_agent:4.0.3:::::::*
cisco	security_agent	4.0.3.728	cpe:2.3:a:cisco:security_agent:4.0.3.728:::::::*
cisco	security_agent	4.5	cpe:2.3:a:cisco:security_agent:4.5:::::::*
cisco	security_agent	4.5.1	cpe:2.3:a:cisco:security_agent:4.5.1:::::::*
cisco	security_agent	4.5.1.639	cpe:2.3:a:cisco:security_agent:4.5.1.639:::::::*