Lucene search

[email protected]CVE-2006-5808

HistoryNov 08, 2006 - 10:07 p.m.

CVE-2006-5808

2006-11-0822:07:00

[email protected]

web.nvd.nist.gov

cisco

secure

desktop

csd

insecure default permissions

local privilege escalation

cve-2006-5808

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka “Local Privilege Escalation”.

Affected configurations

NVD

Node

ciscosecure_desktopRange≤3.1.1.33

ciscosecure_desktopMatch3.1.1.27

CPENameOperatorVersion
cisco:secure_desktopcisco secure desktople3.1.1.33
cisco:secure_desktopcisco secure desktopeq3.1.1.27

CPE	Name	Operator	Version
cisco:secure_desktop	cisco secure desktop	le	3.1.1.33
cisco:secure_desktop	cisco secure desktop	eq	3.1.1.27

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=442

secunia.com/advisories/22747

securitytracker.com/id?1017195

www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml

www.osvdb.org/30308

www.securityfocus.com/bid/20964

www.vupen.com/english/advisories/2006/4409

exchange.xforce.ibmcloud.com/vulnerabilities/30128

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

Related for CVE-2006-5808

nvd1 cvelist1 cisco1