CVE-2004-1112

Published Jan 10, 2005 cisco

Overview

CVE-2004-1112 is a known-severity vulnerability affecting cisco security_agent. It was published on January 10, 2005.

Technical Description

The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.

Remediation

Check the references section for vendor advisories and patches from cisco. Update security_agent to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref www.ciac.org/ciac/bulletins/p-036.shtml Ref www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml Ref www.securityfocus.com/bid/11659 Ref exchange.xforce.ibmcloud.com/vulnerabilities/18037 Ref www.ciac.org/ciac/bulletins/p-036.shtml Ref www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml Ref www.securityfocus.com/bid/11659 Ref exchange.xforce.ibmcloud.com/vulnerabilities/18037

Frequently Asked Questions

What is CVE-2004-1112?

CVE-2004-1112 is a known-severity vulnerability affecting cisco security_agent. It was published on January 10, 2005.

How severe is CVE-2004-1112?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2004-1112?

How can CyberStrike help with CVE-2004-1112?

CyberStrike's AI-powered security agents can automatically detect CVE-2004-1112 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.