NVD

Id
59223  
Name
CVE-2006-0485  
Description
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-31  
Modified Date
2011-03-07  
Seq
2006-0485  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304450 59223 CVE-2006-0485 oval:org.mitre.oval:def:5836  View
304451 59223 CVE-2006-0485 1015543  View
304452 59223 CVE-2006-0485 20060125 Response to AAA Command Authorization by-pass  View
304453 59223 CVE-2006-0485 16383  View
304454 59223 CVE-2006-0485 ADV-2006-0337  View
304455 59223 CVE-2006-0485 cisco-aaa-tcl-auth-bypass(24308)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57875 JVNDB-2006-000071 Cisco IOS の TCL shell における任意のコマンドを実行される脆弱性 ------------ CVE-2006-0485 16587 CVE-2006-0485 59223 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000071.html 2006-01-25 2007-04-01 View