Vulnerability in Cisco Anomaly Guard Module
CVE-2006-0764
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
EPSS: 0.020 (78.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Anomaly_guard_module — versions 5.0\(1\), 5.0\(3\)
- Cisco Guard — versions 5.0\(1\), 5.0\(3\)
- Cisco Traffic_anomaly_detector_module — versions 5.0\(1\), 5.0\(3\)
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)