Secunia

A vulnerability has been reported in Cisco Security Agent for Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerability is caused due to a boundary error in an unspecified system driver used by the application and can be exploited to cause a buffer overflow via a specially crafted packet sent to port 139/TCP or 445/TCP.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in all versions of Cisco Security Agent for Windows (managed or unmanaged). Please see the vendor's advisory for a list of Cisco products that include the agent.

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
NSFOCUS Security Team

Changelog
Further details available in Customer Area

Original Advisory
Cisco (cisco-sa-20071205-csa):
http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml

NSFOCUS (SA2007-02):
http://www.nsfocus.com/english/homepage/research/0702.htm

Deep Links
Links available in Customer Area