Lucene search

[email protected]CVE-2006-1961

HistoryApr 21, 2006 - 10:02 a.m.

CVE-2006-1961

2006-04-2110:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ciscoworks

wlse

hse

urt

linux shell access

cli

cisco vulnerability

cscsd21502

cscsd22861

cscsd22859

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

JSON

Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the “show” command in the application’s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.

CPENameOperatorVersion
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.3
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.6
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.11
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.2
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.4
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.12
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.10
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.13
cisco:user_registration_toolcisco user registration tooleq*
cisco:wireless_lan_solution_enginecisco wireless lan solution engineeq2.1

CPE	Name	Operator	Version
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.3
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.6
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.11
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.2
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.4
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.12
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.10
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.13
cisco:user_registration_tool	cisco user registration tool	eq	*
cisco:wireless_lan_solution_engine	cisco wireless lan solution engine	eq	2.1

Rows per page:

1-10 of 221

References

secunia.com/advisories/19736

secunia.com/advisories/19739

secunia.com/advisories/19741

securitytracker.com/id?1015965

www.assurance.com.au/advisories/200604-cisco.txt

www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml

www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml

www.osvdb.org/24813

www.securityfocus.com/archive/1/431367/30/5490/threaded

www.securityfocus.com/archive/1/431371/30/5490/threaded

www.securityfocus.com/bid/17609

www.vupen.com/english/advisories/2006/1434

www.vupen.com/english/advisories/2006/1435

exchange.xforce.ibmcloud.com/vulnerabilities/25884

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.1%

JSON

Related for CVE-2006-1961

cvelist1 prion1