CVE-2006-0764

T

he Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.

Configurations

Configuration 1 (hide)

OR cpe:2.3:h:cisco:anomaly_guard_module:5.0\(1\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:anomaly_guard_module:5.0\(3\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:guard:5.0\(1\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:guard:5.0\(3\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:traffic_anomaly_detector_module:5.0\(1\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:traffic_anomaly_detector_module:5.0\(3\):*:*:*:*:*:*:*

History

21 Nov 2024, 00:07

Type Values Removed Values Added
References () http://secunia.com/advisories/18904 - () http://secunia.com/advisories/18904 -
References () http://securityreason.com/securityalert/435 - () http://securityreason.com/securityalert/435 -
References () http://securitytracker.com/id?1015637 - () http://securitytracker.com/id?1015637 -
References () http://securitytracker.com/id?1015638 - () http://securitytracker.com/id?1015638 -
References () http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml - Vendor Advisory () http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml - Vendor Advisory
References () http://www.osvdb.org/23237 - () http://www.osvdb.org/23237 -
References () http://www.securityfocus.com/bid/16661 - () http://www.securityfocus.com/bid/16661 -
References () http://www.vupen.com/english/advisories/2006/0612 - () http://www.vupen.com/english/advisories/2006/0612 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24689 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24689 -

Information

Published : 2006-02-18 02:02

Updated : 2025-04-03 01:03


NVD link : CVE-2006-0764

Mitre link : CVE-2006-0764

CVE.ORG link : CVE-2006-0764


JSON object : View