PT-2006-1813 · Cisco · Cisco Anomaly Detection/Mitigation

Gerrit Wenig · Publicado 2006-02-18 · Atualizado 2017-07-20 · CVE-2006-0764

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Anomaly Detection and Mitigation software versions 5.0(1) and 5.0(3)

Description The issue concerns the Authentication, Authorization, and Accounting (AAA) capability. When running with an incomplete TACACS+ configuration without a "tacacs-server host" command, it allows remote attackers to bypass authentication and gain privileges.

Recommendations For version 5.0(1), ensure a complete TACACS+ configuration, including the "tacacs-server host" command, to prevent authentication bypass. For version 5.0(3), ensure a complete TACACS+ configuration, including the "tacacs-server host" command, to prevent authentication bypass.

Correção

Identificadores relacionados

CVE-2006-0764

Produtos afetados

Cisco Anomaly Detection/Mitigation

Referências · 10

• http://securitytracker.com/id?1015637 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml · Aviso do Fabricante
• http://securityreason.com/securityalert/435 · Nota
• http://vupen.com/english/advisories/2006/0612 · Nota
• http://osvdb.org/23237 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0764 · Nota de Segurança
• http://securityfocus.com/bid/16661 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24689 · Nota
• http://secunia.com/advisories/18904 · Nota
• http://securitytracker.com/id?1015638 · Nota