BugTraq
Cisco NAC Appliance Agent Installation Bypass Vulnerability Aug 26 2006 12:23AM
Andreas Gal (gal uci edu) (2 replies)
Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Aug 26 2006 08:31PM
Eloy Paris (elparis cisco com) (1 replies)
Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Aug 29 2006 10:20PM
Joe Feise (jfeise feise com)
Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Aug 26 2006 07:24PM
Udo Sprotte (USprotte web de)
Am Samstag, 26. August 2006 02:23 schrieb Andreas Gal:
> Cisco NAC Appliance Agent Installation Bypass Vulnerability
> Von: Andreas Gal <gal (at) uci (dot) edu [email concealed]>
> An: bugtraq (at) securityfocus (dot) com [email concealed]
>
> Description:
> Cisco NAC Appliance (formerly Cisco Clean Access) is an easily deployed
> Network Admission Control (NAC) product that uses the network
> infrastructure to enforce security policy compliance on all devices
> seeking to access network computing resources. With NAC Appliance, network
> administrators can authenticate, authorize, evaluate, and remediate wired,
> wireless, and remote users and their machines prior to network access. It
> identifies whether networked devices such as laptops, IP phones, or game
> consoles are compliant with your network's security policies and repairs
> any vulnerabilities before permitting access to the network.
You need the Cisco ACS 4.0.X for Cisco NAC, because it need the protocolls
GAME and HCAP. There is ab bug in Cisco ACS. The RADIUS has a in the
ODBC-Support with Oracle >= 9.X. So you can only configure the Radius Pofiles
on the RADIUS and not on external Databses.
--
kind regarts

Udo Sprotte

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus