PT-2006-1813 · Cisco · Cisco Anomaly Detection/Mitigation

Gerrit Wenig · Published 2006-02-18 · Updated 2017-07-20 · CVE-2006-0764

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Anomaly Detection and Mitigation software versions 5.0(1) and 5.0(3)

Description The issue concerns the Authentication, Authorization, and Accounting (AAA) capability. When running with an incomplete TACACS+ configuration without a "tacacs-server host" command, it allows remote attackers to bypass authentication and gain privileges.

Recommendations For version 5.0(1), ensure a complete TACACS+ configuration, including the "tacacs-server host" command, to prevent authentication bypass. For version 5.0(3), ensure a complete TACACS+ configuration, including the "tacacs-server host" command, to prevent authentication bypass.

Fix

Related Identifiers

CVE-2006-0764

Affected Products

Cisco Anomaly Detection/Mitigation

References · 10

• http://cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0764 · Security Note
• http://securitytracker.com/id?1015637 · Note
• http://securityreason.com/securityalert/435 · Note
• http://vupen.com/english/advisories/2006/0612 · Note
• http://osvdb.org/23237 · Note
• http://securityfocus.com/bid/16661 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24689 · Note
• http://secunia.com/advisories/18904 · Note
• http://securitytracker.com/id?1015638 · Note