Secunia

A vulnerability has been reported in Cisco Security Agent (CSA), which can be exploited by malicious people to bypass certain security features.

The vulnerability is caused due to an error in the buffer overflow detection functionality used for detecting exploitation of buffer overflow vulnerabilities. This can be exploited to bypass the offered protection by exploiting a buffer overflow vulnerability twice in rapid succession.

The vulnerability has been reported in the following versions:
* Cisco Security Agent 4.x (prior to version 4.0.3 build 728)
* Cisco Security Agent 3.x
* Okena Stormwatch 3.x
* Cisco Security Agent for CallManager (prior to version 4.0.3 build 728)

Solution
Update to CSA version 4.0.3.728 or later.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml

Deep Links
Links available in Customer Area