Search
Find a vulnerability
Search criteria
2 vulnerabilities found for anomaly_guard_module by cisco
CVE-2006-0764 (GCVE-0-2006-0764)
Vulnerability from nvd – Published: 2006-02-18 02:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/18904 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16661 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015638 | vdb-entryx_refsource_SECTRACK |
| http://www.cisco.com/en/US/products/products_secu… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/435 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0612 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015637 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23237 | vdb-entryx_refsource_OSVDB |
Date Public
2006-02-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23237"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23237"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23237"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0764",
"datePublished": "2006-02-18T02:00:00.000Z",
"dateReserved": "2006-02-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0764 (GCVE-0-2006-0764)
Vulnerability from cvelistv5 – Published: 2006-02-18 02:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/18904 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16661 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015638 | vdb-entryx_refsource_SECTRACK |
| http://www.cisco.com/en/US/products/products_secu… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/435 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0612 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015637 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23237 | vdb-entryx_refsource_OSVDB |
Date Public
2006-02-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23237"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23237"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23237"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0764",
"datePublished": "2006-02-18T02:00:00.000Z",
"dateReserved": "2006-02-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}