Lucene search

K
cve[email protected]CVE-2006-4316
HistoryAug 23, 2006 - 10:04 p.m.

CVE-2006-4316

2006-08-2322:04:00
web.nvd.nist.gov
20
cve-2006-4316
ssh
tectia
management agent
root privileges
vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the “Restart” action is selected from the Management server GUI, which causes the agent to locate the pathname of the user’s program and restart it with root privileges.

Affected configurations

NVD
Node
sshtectia_managerMatch1.2
OR
sshtectia_managerMatch1.3
OR
sshtectia_managerMatch1.4
OR
sshtectia_managerMatch2.0
OR
sshtectia_managerMatch2.1.2

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

Related for CVE-2006-4316