NVD

Id
59296  
Name
CVE-2006-0561  
Description
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft"s cryptographic API functions to obtain the plaintext version of the master key.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-05-09  
Modified Date
2011-03-07  
Seq
2006-0561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304844 59296 CVE-2006-0561 1016042  View
304845 59296 CVE-2006-0561 20060508 Response to Symantec SYMSA-2006-003 Cisco Secure ACS for Windows - Administrator Password Disclosure  View
304846 59296 CVE-2006-0561 20060508 SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure  View
304847 59296 CVE-2006-0561 20060508 Re: SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure  View
304848 59296 CVE-2006-0561 16743  View
304849 59296 CVE-2006-0561 http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt  View
304850 59296 CVE-2006-0561 ADV-2006-1741  View
304851 59296 CVE-2006-0561 cisco-acs-admin-password-disclosure(26307)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61597 JVNDB-2006-003863 Windows 用 Cisco Secure Access Control Server におけるパスワードを解読される脆弱性 Windows 用 Cisco Secure Access Control Server (ACS) には、パスワードを解読される脆弱性が存在します。 CVE-2006-0561 16663 CVE-2006-0561 59296 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003863.html 2006-05-10 2014-03-11 View