NVD

Id
60666  
Name
CVE-2006-1961  
Description
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application"s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-21  
Modified Date
2011-03-07  
Seq
2006-1961  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313172 60666 CVE-2006-1961 1015965  View
313173 60666 CVE-2006-1961 http://www.assurance.com.au/advisories/200604-cisco.txt  View
313174 60666 CVE-2006-1961 20060419 Multiple Vulnerabilities in the WLSE Appliance  View
313175 60666 CVE-2006-1961 20060419 Response to Privilege Escalation on Multiple Cisco Products  View
313176 60666 CVE-2006-1961 20060419 Re: Multiple vulnerabilities in Linux based Cisco products  View
313177 60666 CVE-2006-1961 20060419 Multiple vulnerabilities in Linux based Cisco products  View
313178 60666 CVE-2006-1961 17609  View
313179 60666 CVE-2006-1961 ADV-2006-1434  View
313180 60666 CVE-2006-1961 ADV-2006-1435  View
313181 60666 CVE-2006-1961 cisco-wlse-shell-privilege-escalation(25884)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61691 JVNDB-2006-003957 複数の Cisco 製品における Linux シェルアクセスを取得される脆弱性 複数の Cisco 製品には、Linux シェルアクセスを取得される脆弱性が存在します。 CVE-2006-1961 18063 CVE-2006-1961 60666 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003957.html 2006-04-21 2014-03-11 View