PT-2006-2945 · Cisco · Ciscoworks2000 Service Management Solution+4

Published 2006-04-21 · Updated 2018-10-18 · CVE-2006-1961

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express versions prior to 2.13 Cisco Hosting Solution Engine (HSE) and User Registration Tool (URT) versions prior to 20060419 Cisco Ethernet Subscriber Solution Engine (ESSE) (affected versions not specified) CiscoWorks2000 Service Management Solution (SMS) (affected versions not specified)

Description The issue allows local users to gain Linux shell access via shell metacharacters in arguments to the show command in the application's command line interface (CLI).

Recommendations For Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express versions prior to 2.13, update to version 2.13 or later. For Cisco Hosting Solution Engine (HSE) and User Registration Tool (URT) versions prior to 20060419, update to a version released after 20060419. For Cisco Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-1961

Affected Products

Cisco Ethernet Subscriber Solution Engine

Cisco Hosting Solution Engine

Ciscoworks Wireless Lan Solution Engine

Ciscoworks2000 Service Management Solution

User Registration Tool

References · 15

• http://secunia.com/advisories/19736 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1961 · Security Note
• http://securitytracker.com/id?1015965 · Patch
• http://secunia.com/advisories/19741 · Note
• http://secunia.com/advisories/19739 · Note
• http://securityfocus.com/archive/1/431367/30/5490/threaded · Note
• http://osvdb.org/24813 · Note
• http://securityfocus.com/bid/17609 · Note
• http://cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25884 · Note
• http://assurance.com.au/advisories/200604-cisco.txt · Note
• http://vupen.com/english/advisories/2006/1434 · Note
• http://securityfocus.com/archive/1/431371/30/5490/threaded · Note
• http://vupen.com/english/advisories/2006/1435 · Note
• http://cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml · Patch, Vendor Advisory