CVE

Id
16868  
CVE No.
CVE-2006-0764  
Status
Candidate  
Description
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.  
Phase
Assigned (20060218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137389 16868 CVE-2006-0764 CISCO:20060215 TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products  View
137390 16868 CVE-2006-0764 URL:http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml  View
137391 16868 CVE-2006-0764 BID:16661  View
137392 16868 CVE-2006-0764 URL:http://www.securityfocus.com/bid/16661  View
137393 16868 CVE-2006-0764 VUPEN:ADV-2006-0612  View
137394 16868 CVE-2006-0764 URL:http://www.vupen.com/english/advisories/2006/0612  View
137395 16868 CVE-2006-0764 OSVDB:23237  View
137396 16868 CVE-2006-0764 URL:http://www.osvdb.org/23237  View
137397 16868 CVE-2006-0764 SECTRACK:1015637  View
137398 16868 CVE-2006-0764 URL:http://securitytracker.com/id?1015637  View
137399 16868 CVE-2006-0764 SECTRACK:1015638  View
137400 16868 CVE-2006-0764 URL:http://securitytracker.com/id?1015638  View
137401 16868 CVE-2006-0764 SECUNIA:18904  View
137402 16868 CVE-2006-0764 URL:http://secunia.com/advisories/18904  View
137403 16868 CVE-2006-0764 SREASON:435  View
137404 16868 CVE-2006-0764 URL:http://securityreason.com/securityalert/435  View
137405 16868 CVE-2006-0764 XF:cisco-tacacs-auth-bypass(24689)  View

Related JVN