What’s Vulnerable › Vulnerabilities

CVE-2004-1112

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-01-10 · updated 2026-06-16

Description

The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.

Affected products

• Cisco Security Agent: 3, 4.0, 4.0.1, 4.0.2, 4.0.3
• Okena Stormwatch: 3.x

References

• http://www.ciac.org/ciac/bulletins/p-036.shtml
• http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml
• http://www.securityfocus.com/bid/11659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18037
• http://www.ciac.org/ciac/bulletins/p-036.shtml
• http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml
• http://www.securityfocus.com/bid/11659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18037

Get alerted when CVE-2004-1112 or the next vulnerability affects your stack