Search
Find a vulnerability
Search criteria
4 vulnerabilities found for guard by cisco
VAR-200609-0397
Vulnerability from variot - Updated: 2025-04-03 22:37Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh. Cisco Guard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the visited site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. When anti-spoofing is enabled, a remote attacker can pass certain URLs that are not properly processed when the device sends metadata refresh. Character sequences injected into arbitrary web script or HTML.
Want to work within IT-Security?
Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit.
The vulnerability is caused due to insufficient filtering of a meta-refresh before it is being returned to a user. If Cisco Guard is running in active basic protection, going through basic/redirect protection, this can be exploited to execute HTML and script code in a user's browser session by e.g. tricking a user into following a specially crafted URL.
The vulnerability affects the following products: - Cisco Guard Appliance version 3.X - Cisco Guard Blade version 4.X - Cisco Guard Appliance versions 5.0(3) and 5.1(5)
SOLUTION: Update to version 5.1(6) or later.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200609-0397",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "guard ddos mitigation appliance",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "5.1\\(5\\)"
},
{
"model": "guard ddos mitigation appliance",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "5.1(6)"
},
{
"model": "guard ddos mitigation appliance",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "5.1\\(5\\)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.1(0)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.08.12"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.08"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.1(5)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.0"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.1(0.12)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
},
{
"model": "guard",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "5.1(6)"
}
],
"sources": [
{
"db": "BID",
"id": "20122"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:guard_ddos_mitigation_appliance",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "This vendor disclosed this issue.",
"sources": [
{
"db": "BID",
"id": "20122"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
}
],
"trust": 0.9
},
"cve": "CVE-2006-4909",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"exploitabilityScore": 4.9,
"id": "CVE-2006-4909",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"exploitabilityScore": 4.9,
"id": "VHN-21017",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:N/AC:H/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-4909",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2006-4909",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNNVD",
"id": "CNNVD-200609-372",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-21017",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-21017"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh. Cisco Guard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. \nAn attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the visited site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. When anti-spoofing is enabled, a remote attacker can pass certain URLs that are not properly processed when the device sends metadata refresh. Character sequences injected into arbitrary web script or HTML. \n\n----------------------------------------------------------------------\n\nWant to work within IT-Security?\n\nSecunia is expanding its team of highly skilled security experts. \nWe will help with relocation and obtaining a work permit. \n\nThe vulnerability is caused due to insufficient filtering of a\nmeta-refresh before it is being returned to a user. If Cisco Guard is\nrunning in active basic protection, going through basic/redirect\nprotection, this can be exploited to execute HTML and script code in\na user\u0027s browser session by e.g. tricking a user into following a\nspecially crafted URL. \n\nThe vulnerability affects the following products:\n- Cisco Guard Appliance version 3.X\n- Cisco Guard Blade version 4.X\n- Cisco Guard Appliance versions 5.0(3) and 5.1(5)\n\nSOLUTION:\nUpdate to version 5.1(6) or later. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4909"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "BID",
"id": "20122"
},
{
"db": "VULHUB",
"id": "VHN-21017"
},
{
"db": "PACKETSTORM",
"id": "50203"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-4909",
"trust": 2.5
},
{
"db": "BID",
"id": "20122",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "21962",
"trust": 1.8
},
{
"db": "VUPEN",
"id": "ADV-2006-3720",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "29035",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1016890",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20060920 CISCO SECURITY ADVISORY: CISCO GUARD ENABLES CROSS SITE SCRIPTING",
"trust": 0.6
},
{
"db": "XF",
"id": "29057",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-21017",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "50203",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-21017"
},
{
"db": "BID",
"id": "20122"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "PACKETSTORM",
"id": "50203"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"id": "VAR-200609-0397",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-21017"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:37:21.874000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20060920-guardxss",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060920-guardxss"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060920-guardxss.shtml"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/20122"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/29035"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1016890"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/21962"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/3720"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29057"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4909"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4909"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/29057"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/3720"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps5888/products_configuration_guide_chapter09186a00804b7d13.html#wp1135548"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps5888/"
},
{
"trust": 0.3,
"url": "/archive/1/446489"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8097/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/quality_assurance_analyst/"
},
{
"trust": 0.1,
"url": "http://secunia.com/hardcore_disassembler_and_reverse_engineer/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/4387/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/21962/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/web_application_security_specialist/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8096/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-21017"
},
{
"db": "BID",
"id": "20122"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "PACKETSTORM",
"id": "50203"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-21017"
},
{
"db": "BID",
"id": "20122"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"db": "PACKETSTORM",
"id": "50203"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-09-21T00:00:00",
"db": "VULHUB",
"id": "VHN-21017"
},
{
"date": "2006-09-20T00:00:00",
"db": "BID",
"id": "20122"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"date": "2006-09-21T23:56:25",
"db": "PACKETSTORM",
"id": "50203"
},
{
"date": "2006-09-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"date": "2006-09-21T00:07:00",
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-21017"
},
{
"date": "2006-09-21T17:56:00",
"db": "BID",
"id": "20122"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-001290"
},
{
"date": "2006-09-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200609-372"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-4909"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Guard DDoS Mitigation Appliance Vulnerable to cross-site scripting",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-001290"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xss",
"sources": [
{
"db": "PACKETSTORM",
"id": "50203"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-372"
}
],
"trust": 0.7
}
}
VAR-200602-0183
Vulnerability from variot - Updated: 2025-04-03 22:21The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455. Cisco Anomaly Detection and Mitigation appliances and service modules are prone to an authentication-bypass vulnerability. This issue can allow attackers to gain unauthorized access to devices or gain elevated privileges. This vulnerability presents itself when the devices have been configured to authenticate users against an external TACACS+ server, but an external TACACS+ server isn't specified in the configuration using the 'tacacs-server host' command. Note that a device is vulnerable only if the 'tacacs-server host' command isn't present in the configuration. Depending on the privileges gained, the attacker may obtain sensitive information about a network by sniffing traffic and inspecting configuration policies. Denial-of-service attacks are also possible. Both Cisco Guard and Cisco Traffic Anomaly Detector appliances are Distributed Denial of Service (DDoS) attack mitigation appliances that detect potential DDoS attacks and divert attack traffic to the monitored network without affecting legitimate traffic. The permissions available to bypass authentication users depend on the type of account used to log in and whether there is an account on the device. The situation is as follows: * Using a non-existing account: the user can only execute the show command Obtain the same permissions normally given to this account* Using an existing Linux account: the user can access the base Linux shell Additionally, if the enable authentication is performed on the TACACS+ server via the aaa authentication enable tacacs+ command and the actual TACACS+ server is not specified via the tacacs-server host command The user can also bypass the authentication of the enable command.
TITLE: Cisco Products TACACS+ Authentication Bypass
SECUNIA ADVISORY ID: SA18904
VERIFY ADVISORY: http://secunia.com/advisories/18904/
CRITICAL: Less critical
IMPACT: Security Bypass
WHERE:
From remote
OPERATING SYSTEM: Cisco Guard 5.x http://secunia.com/product/8097/ Cisco Traffic Anomaly Detector 5.x http://secunia.com/product/8095/
SOFTWARE: Cisco Catalyst 6500/Cisco 7600 Router Anomaly Guard Module http://secunia.com/product/8098/ Cisco Catalyst 6500/Cisco 7600 Router Traffic Anomaly Detector Module http://secunia.com/product/8099/
DESCRIPTION: A security issue has been reported in various Cisco products, which can be exploited by malicious people to bypass certain security restrictions.
Successful exploitation requires that TACACS+ authentication is incompletely configured (i.e.
The security issue affects the following products: * Cisco Guard versions 5.0(1) and 5.0(3) * Cisco Traffic Anomaly Detector versions 5.0(1) and 5.0(3) * Anomaly Guard Module for the Cisco Catalyst 6500 switches/Cisco 7600 routers * Traffic Anomaly Detector Module for the Cisco Catalyst 6500 switches/Cisco 7600 routers
NOTE: Versions prior to 5.0 and versions later than 5.0(3) are unaffected.
SOLUTION: Update to version 5.1(4) or later.
Software for the Cisco Guard appliance: http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ga-crypto.
Software for the Cisco Traffic Anomaly Detector appliance: http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ad-crypto.
Software for the Cisco Anomaly Guard Module: http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-agm-crypto.
Software for the Cisco Anomaly Traffic Detector Module: http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-adm-crypto
Configure TACACS+ authentication properly.
PROVIDED AND/OR DISCOVERED BY: The vendor credits Gerrit Wenig.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200602-0183",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "guard",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(3\\)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(3\\)"
},
{
"model": "guard",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(1\\)"
},
{
"model": "traffic anomaly detector module",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(3\\)"
},
{
"model": "traffic anomaly detector module",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(1\\)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.0\\(1\\)"
},
{
"model": "traffic anomaly detector module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "traffic anomaly detector module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
},
{
"model": "traffic anomaly detector",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "traffic anomaly detector",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "guard",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(3)"
},
{
"model": "anomaly guard module",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0(1)"
}
],
"sources": [
{
"db": "BID",
"id": "16661"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Gerrit Wenig",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
}
],
"trust": 0.6
},
"cve": "CVE-2006-0764",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "CVE-2006-0764",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "VHN-16872",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-0764",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200602-261",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-16872",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16872"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455. Cisco Anomaly Detection and Mitigation appliances and service modules are prone to an authentication-bypass vulnerability. This issue can allow attackers to gain unauthorized access to devices or gain elevated privileges. \nThis vulnerability presents itself when the devices have been configured to authenticate users against an external TACACS+ server, but an external TACACS+ server isn\u0027t specified in the configuration using the \u0027tacacs-server host\u0027 command. \nNote that a device is vulnerable only if the \u0027tacacs-server host\u0027 command isn\u0027t present in the configuration. \nDepending on the privileges gained, the attacker may obtain sensitive information about a network by sniffing traffic and inspecting configuration policies. Denial-of-service attacks are also possible. Both Cisco Guard and Cisco Traffic Anomaly Detector appliances are Distributed Denial of Service (DDoS) attack mitigation appliances that detect potential DDoS attacks and divert attack traffic to the monitored network without affecting legitimate traffic. The permissions available to bypass authentication users depend on the type of account used to log in and whether there is an account on the device. The situation is as follows: * Using a non-existing account: the user can only execute the show command Obtain the same permissions normally given to this account* Using an existing Linux account: the user can access the base Linux shell Additionally, if the enable authentication is performed on the TACACS+ server via the aaa authentication enable tacacs+ command and the actual TACACS+ server is not specified via the tacacs-server host command The user can also bypass the authentication of the enable command. \n\nTITLE:\nCisco Products TACACS+ Authentication Bypass\n\nSECUNIA ADVISORY ID:\nSA18904\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/18904/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nSecurity Bypass\n\nWHERE:\n\u003eFrom remote\n\nOPERATING SYSTEM:\nCisco Guard 5.x\nhttp://secunia.com/product/8097/\nCisco Traffic Anomaly Detector 5.x\nhttp://secunia.com/product/8095/\n\nSOFTWARE:\nCisco Catalyst 6500/Cisco 7600 Router Anomaly Guard Module\nhttp://secunia.com/product/8098/\nCisco Catalyst 6500/Cisco 7600 Router Traffic Anomaly Detector Module\nhttp://secunia.com/product/8099/\n\nDESCRIPTION:\nA security issue has been reported in various Cisco products, which\ncan be exploited by malicious people to bypass certain security\nrestrictions. \n\nSuccessful exploitation requires that TACACS+ authentication is\nincompletely configured (i.e. \n\nThe security issue affects the following products:\n* Cisco Guard versions 5.0(1) and 5.0(3)\n* Cisco Traffic Anomaly Detector versions 5.0(1) and 5.0(3)\n* Anomaly Guard Module for the Cisco Catalyst 6500 switches/Cisco\n7600 routers\n* Traffic Anomaly Detector Module for the Cisco Catalyst 6500\nswitches/Cisco 7600 routers\n\nNOTE: Versions prior to 5.0 and versions later than 5.0(3) are\nunaffected. \n\nSOLUTION:\nUpdate to version 5.1(4) or later. \n\nSoftware for the Cisco Guard appliance:\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ga-crypto. \n\nSoftware for the Cisco Traffic Anomaly Detector appliance:\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ad-crypto. \n\nSoftware for the Cisco Anomaly Guard Module:\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-agm-crypto. \n\nSoftware for the Cisco Anomaly Traffic Detector Module:\nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-adm-crypto\n\nConfigure TACACS+ authentication properly. \n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Gerrit Wenig. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0764"
},
{
"db": "BID",
"id": "16661"
},
{
"db": "VULHUB",
"id": "VHN-16872"
},
{
"db": "PACKETSTORM",
"id": "43910"
}
],
"trust": 1.35
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "16661",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "18904",
"trust": 1.8
},
{
"db": "VUPEN",
"id": "ADV-2006-0612",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "23237",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1015637",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1015638",
"trust": 1.7
},
{
"db": "NVD",
"id": "CVE-2006-0764",
"trust": 1.7
},
{
"db": "SREASON",
"id": "435",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261",
"trust": 0.7
},
{
"db": "XF",
"id": "24689",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20060215 TACACS+ AUTHENTICATION BYPASS IN CISCO ANOMALY DETECTION AND MITIGATION PRODUCTS",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-16872",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "43910",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16872"
},
{
"db": "BID",
"id": "16661"
},
{
"db": "PACKETSTORM",
"id": "43910"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"id": "VAR-200602-0183",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-16872"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:21:42.704000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/16661"
},
{
"trust": 1.7,
"url": "http://www.cisco.com/en/us/products/products_security_advisory09186a008060519a.shtml"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/23237"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1015637"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1015638"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/18904"
},
{
"trust": 1.7,
"url": "http://securityreason.com/securityalert/435"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/0612"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/24689"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ad-crypto."
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8097/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-agm-crypto."
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-ga-crypto."
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/18904/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8098/"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cisco-adm-crypto"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8095/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/8099/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16872"
},
{
"db": "PACKETSTORM",
"id": "43910"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-16872"
},
{
"db": "BID",
"id": "16661"
},
{
"db": "PACKETSTORM",
"id": "43910"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-02-18T00:00:00",
"db": "VULHUB",
"id": "VHN-16872"
},
{
"date": "2006-02-15T00:00:00",
"db": "BID",
"id": "16661"
},
{
"date": "2006-02-16T21:45:30",
"db": "PACKETSTORM",
"id": "43910"
},
{
"date": "2006-02-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"date": "2006-02-18T02:02:00",
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-16872"
},
{
"date": "2006-02-15T21:07:00",
"db": "BID",
"id": "16661"
},
{
"date": "2006-02-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200602-261"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-0764"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Multiple products TACACS+ Access authentication bypass vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "16661"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-261"
}
],
"trust": 0.9
}
}
CVE-2006-0764 (GCVE-0-2006-0764)
Vulnerability from nvd – Published: 2006-02-18 02:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/18904 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16661 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015638 | vdb-entryx_refsource_SECTRACK |
| http://www.cisco.com/en/US/products/products_secu… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/435 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0612 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015637 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23237 | vdb-entryx_refsource_OSVDB |
Date Public
2006-02-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23237"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23237"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23237"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0764",
"datePublished": "2006-02-18T02:00:00.000Z",
"dateReserved": "2006-02-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0764 (GCVE-0-2006-0764)
Vulnerability from cvelistv5 – Published: 2006-02-18 02:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/18904 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16661 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015638 | vdb-entryx_refsource_SECTRACK |
| http://www.cisco.com/en/US/products/products_secu… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securityreason.com/securityalert/435 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0612 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1015637 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/23237 | vdb-entryx_refsource_OSVDB |
Date Public
2006-02-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23237"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "18904",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23237"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0764",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a \"tacacs-server host\" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "18904",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18904"
},
{
"name": "16661",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16661"
},
{
"name": "1015638",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015638"
},
{
"name": "20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products",
"refsource": "CISCO",
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml"
},
{
"name": "cisco-tacacs-auth-bypass(24689)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24689"
},
{
"name": "435",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/435"
},
{
"name": "ADV-2006-0612",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0612"
},
{
"name": "1015637",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015637"
},
{
"name": "23237",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23237"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0764",
"datePublished": "2006-02-18T02:00:00.000Z",
"dateReserved": "2006-02-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}