NVD

Id
53972  
Name
CVE-2007-1800  
Description
Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-02  
Modified Date
2012-11-05  
Seq
2007-1800  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273696 53972 CVE-2007-1800 http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Dror  View
273697 53972 CVE-2007-1800 20070330 NACATTACK Presentation  View
273698 53972 CVE-2007-1800 cisco-acs-cta-unauthorized-access(33557)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53080 JVNDB-2007-001772 Cisco Secure ACS におけるネットワークアクセス権を取得される脆弱性 Cisco Secure ACS には、Cisco Trust Agent (CTA) がポスチャ情報を送信している際、認証を必要としないため、ネットワークアクセス権を取得される脆弱性が存在します。 CVE-2007-1800 25155 CVE-2007-1800 53972 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001772.html 2007-03-30 2012-06-26 View