4.6

CVE-2006-5808

EPSS 0.08%
Veröffentlicht 08.11.2006 22:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation".

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Desktop Version <= 3.1.1.33

Cisco ≫ Secure Desktop Version3.1.1.27

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.23

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/22747

http://securitytracker.com/id?1017195

http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml

Patch

http://www.securityfocus.com/bid/20964

http://www.vupen.com/english/advisories/2006/4409

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=442

Patch

Vendor Advisory

http://www.osvdb.org/30308

https://exchange.xforce.ibmcloud.com/vulnerabilities/30128

https://nvd.nist.gov/vuln/detail/CVE-2006-5808

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5808

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5808

EUVD