Lucene search

[email protected]CVE-2006-5807

HistoryNov 08, 2006 - 10:07 p.m.

CVE-2006-5807

2006-11-0822:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

secure desktop

csd

system policy evasion

cve-2006-5807

nvd

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.3%

JSON

Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka “System Policy Evasion”.

CPENameOperatorVersion
cisco:secure_desktopcisco secure desktople3.1.1.33

CPE	Name	Operator	Version
cisco:secure_desktop	cisco secure desktop	le	3.1.1.33

References

secunia.com/advisories/22747

securitytracker.com/id?1017195

www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml

www.osvdb.org/30307

www.securityfocus.com/bid/20964

www.vupen.com/english/advisories/2006/4409

exchange.xforce.ibmcloud.com/vulnerabilities/30130

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.3%

JSON

Related for CVE-2006-5807

cvelist1 cisco1