Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption) or make unauthorized files accessible by uploading files through requests to certain JSP scripts a related issue to CVE-2005-4332.