PT-2006-6367 · Cisco · Cisco Security Agent Management Center

Published 2006-11-03 · Updated 2017-07-20 · CVE-2006-5660

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Cisco Security Agent Management Center (CSAMC) versions 5.1 through 5.1.0.78

Description: The issue arises from improper handling of certain LDAP error messages, allowing remote attackers to bypass authentication requirements by using an empty password when connected to an external LDAP server.

Recommendations: For versions 5.1 through 5.1.0.78, update to version 5.1.0.79 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5660

Affected Products

Cisco Security Agent Management Center

References · 9

• http://cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5660 · Security Note
• http://securityfocus.com/bid/20852 · Patch
• http://securitytracker.com/id?1017148 · Note
• http://vupen.com/english/advisories/2006/4308 · Note
• http://osvdb.org/30169 · Note
• http://secunia.com/advisories/22684 · Note
• http://kb.cert.org/vuls/id/778648 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29955 · Note