PT-2006-6367 · Cisco · Cisco Security Agent Management Center

Publicado 2006-11-03 · Atualizado 2017-07-20 · CVE-2006-5660

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Cisco Security Agent Management Center (CSAMC) versions 5.1 through 5.1.0.78

Description: The issue arises from improper handling of certain LDAP error messages, allowing remote attackers to bypass authentication requirements by using an empty password when connected to an external LDAP server.

Recommendations: For versions 5.1 through 5.1.0.78, update to version 5.1.0.79 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-5660

Produtos afetados

Cisco Security Agent Management Center

Referências · 9

• http://securitytracker.com/id?1017148 · Nota
• http://vupen.com/english/advisories/2006/4308 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml · Aviso do Fabricante
• http://osvdb.org/30169 · Nota
• http://secunia.com/advisories/22684 · Nota
• http://kb.cert.org/vuls/id/778648 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5660 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29955 · Nota
• http://securityfocus.com/bid/20852 · Correção