CVE-2007-0058

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:C/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/23556Third Party Advisory
http://securitytracker.com/id?1017465Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtmlVendor Advisory
http://www.osvdb.org/32579Broken Link
http://www.vupen.com/english/advisories/2007/0030Third Party Advisory
http://secunia.com/advisories/23556Third Party Advisory
http://securitytracker.com/id?1017465Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtmlVendor Advisory
http://www.osvdb.org/32579Broken Link
http://www.vupen.com/english/advisories/2007/0030Third Party Advisory

Timeline

Published: Jan 4, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-00596.8Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list fi CVE-2007-00609.3Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) softwa CVE-2007-006110.0The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pla CVE-2007-006210.0Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Buil CVE-2007-006310.0Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.CVE-2007-00649.3Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Wi CVE-2007-006510.0Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, CVE-2007-00667.1The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attac CVE-2007-00677.8Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a CVE-2007-00689.3IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows CVE-2007-00699.3Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of ser CVE-2007-00719.3Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code vi