NVD

Id
64254  
Name
CVE-2006-5660  
Description
Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-02  
Modified Date
2011-03-07  
Seq
2006-5660  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335165 64254 CVE-2006-5660 1017148  View
335166 64254 CVE-2006-5660 20061101 Cisco Security Agent Management Center LDAP Administrator Authentication Bypass  View
335167 64254 CVE-2006-5660 VU#778648  View
335168 64254 CVE-2006-5660 20852  View
335169 64254 CVE-2006-5660 ADV-2006-4308  View
335170 64254 CVE-2006-5660 cisco-csamc-auth-bypass(29955)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59204 JVNDB-2006-001470 CSAMC における認証の要件を回避される脆弱性 Cisco Security Agent Management Center (CSAMC) は、外部 LDAP サーバを使用している際、特定の LDAP エラーメッセージを適切に処理しないため、認証の要件を回避される脆弱性が存在します。 CVE-2006-5660 21762 CVE-2006-5660 64254 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001470.html 2006-11-01 2012-06-26 View