The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Cisco Network Admission Control Shared Secret Vulnerability
------------------------------------------------------------------------
SUMMARY
A vulnerability exists in the Cisco Network Admission Control (NAC)
Appliance that can allow an attacker to obtain the shared secret that is
used between the Cisco Clean Access Server (CAS) and the Cisco Clean
Access Manager (CAM).
DETAILS
Vulnerable Systems:
* NAC Software Release version 3.5.x - All 3.5.x versions
* NAC Software Release version 3.6.x - All 3.6.x versions prior to
3.6.4.4
* NAC Software Release version 4.0.x - All 4.0.x versions prior to 4.0.6
* NAC Software Release version 4.1.x - All 4.1.x versions prior to 4.1.2
Immune Systems:
* Cisco NAC Appliance software versions 3.6.4.4 and later in the 3.6.x
Release
* Cisco NAC Appliance software versions 4.0.6 and later in the 4.0.x
Release
* Cisco NAC Appliance software versions 4.1.2 and later in the 4.1.x
Release
The Cisco NAC Appliance solution allows network administrators to
authenticate, authorize, evaluate, and remediate wired, wireless, and
remote users and their machines prior to allowing users onto the network.
The solution identifies whether machines are compliant with security
policies and repairs vulnerabilities before permitting access to the
network.
A vulnerability exists in the Cisco NAC Appliance that can allow an
attacker to obtain the shared secret used by the CAS and the CAM from
error logs that are transmitted over the network. Obtaining this
information could enable an attacker to gain complete control of the CAS
remotely over the network.
This vulnerability is documented in Cisco Bug ID
<http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj33976>
CSCsj33976 ( registered customers only).
Impact:
Successful exploitation of the vulnerability could allow an attacker to
take complete control of the CAS remotely over the network.
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1155>
CVE-2008-1155
ADDITIONAL INFORMATION
The information has been provided by <mailto:psirt@cisco.com> Cisco
Systems Product Security Incident Response Team.
The original article can be found at:
<http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml>
http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
