<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 23:09:19 +0000</lastBuildDate>
    <item>
      <title>CERTA-2008-AVI-210 — Une vulnérabilité a été identifiée dans Cisco NAC (&lt;span
class="textit"&gt;Network Admission Control&lt;/span&gt;) Appliance. El…</title>
      <link>https://vulnerability.circl.lu/vuln/CERTA-2008-AVI-210</link>
      <description>CERTA-2008-AVI-210</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/CERTA-2008-AVI-210</guid>
    </item>
    <item>
      <title>fkie_cve-2008-1155</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2008-1155</link>
      <description>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2008-1155</guid>
    </item>
    <item>
      <title>GHSA-4898-hwxm-j2vf</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-4898-hwxm-j2vf</link>
      <description>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-4898-hwxm-j2vf</guid>
    </item>
    <item>
      <title>gsd-2008-1155</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2008-1155</link>
      <description>gsd-2008-1155</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2008-1155</guid>
    </item>
    <item>
      <title>VAR-200804-0274</title>
      <link>https://vulnerability.circl.lu/vuln/var-200804-0274</link>
      <description>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs. Cisco Network Admission Control (NAC) Appliance Contains an information disclosure vulnerability.  This may facilitate the complete compromise of the device and may lead to further attacks.  This issue is documented in Cisco Bug ID   CSCsj33976. 
This issue affects the following versions of the NAC appliance software:
- all 3.5 versions
- all 3.6 versions prior to 3.6.4.4
- all 4.0 versions prior to 4.0.6
- all 4.1 versions prior to 4.1.2.&lt;/p&gt;
&lt;p&gt;Cisco has released free software updates that address this
vulnerability.&lt;/p&gt;
&lt;p&gt;This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml. No other Cisco products are currently
known to be affected by this vulnerability.&lt;/p&gt;
&lt;p&gt;Details
=======&lt;/p&gt;
&lt;p&gt;The Cisco NAC Appliance solution allows network administrators to
authenticate, authorize, evaluate, and remediate wired, wireless,
and remote users and their machines prior to allowing users onto the
network. The solution identifies whether machines are compliant with
security policies and repairs vulnerabilities before permitting access
to the network. Obtaining this
information could enable an attacker to gain complete control of the CAS
remotely over the network.&lt;/p&gt;
&lt;p&gt;Vulnerability Scoring Details
+-----------------…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs. Cisco Network Admission Control (NAC) Appliance Contains an information disclosure vulnerability.  This may facilitate the complete compromise of the device and may lead to further attacks.  This issue is documented in Cisco Bug ID   CSCsj33976. 
This issue affects the following versions of the NAC appliance software:
- all 3.5 versions
- all 3.6 versions prior to 3.6.4.4
- all 4.0 versions prior to 4.0.6
- all 4.1 versions prior to 4.1.2.&lt;/p&gt;
&lt;p&gt;Cisco has released free software updates that address this
vulnerability.&lt;/p&gt;
&lt;p&gt;This advisory is posted at
http://www.cisco.com/warp/public/707/cisco-sa-20080416-nac.shtml. No other Cisco products are currently
known to be affected by this vulnerability.&lt;/p&gt;
&lt;p&gt;Details
=======&lt;/p&gt;
&lt;p&gt;The Cisco NAC Appliance solution allows network administrators to
authenticate, authorize, evaluate, and remediate wired, wireless,
and remote users and their machines prior to allowing users onto the
network. The solution identifies whether machines are compliant with
security policies and repairs vulnerabilities before permitting access
to the network. Obtaining this
information could enable an attacker to gain complete control of the CAS
remotely over the network.&lt;/p&gt;
&lt;p&gt;Vulnerability Scoring Details
+-----------------…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/var-200804-0274</guid>
    </item>
  </channel>
</rss>
