{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-01T00:00:00", "descriptions": [{"lang": "en", "value": "Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "cisco-csamc-auth-bypass(29955)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955"}, {"name": "22684", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22684"}, {"name": "20061101 Cisco Security Agent Management Center LDAP Administrator Authentication Bypass", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml"}, {"name": "30169", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30169"}, {"name": "ADV-2006-4308", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4308"}, {"name": "20852", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/20852"}, {"name": "1017148", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017148"}, {"name": "VU#778648", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/778648"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-5660", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "cisco-csamc-auth-bypass(29955)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955"}, {"name": "22684", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22684"}, {"name": "20061101 Cisco Security Agent Management Center LDAP Administrator Authentication Bypass", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml"}, {"name": "30169", "refsource": "OSVDB", "url": "http://www.osvdb.org/30169"}, {"name": "ADV-2006-4308", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4308"}, {"name": "20852", "refsource": "BID", "url": "http://www.securityfocus.com/bid/20852"}, {"name": "1017148", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017148"}, {"name": "VU#778648", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/778648"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:55:54.162Z"}, "title": "CVE Program Container", "references": [{"name": "cisco-csamc-auth-bypass(29955)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955"}, {"name": "22684", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22684"}, {"name": "20061101 Cisco Security Agent Management Center LDAP Administrator Authentication Bypass", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml"}, {"name": "30169", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30169"}, {"name": "ADV-2006-4308", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4308"}, {"name": "20852", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/20852"}, {"name": "1017148", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017148"}, {"name": "VU#778648", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/778648"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-5660", "datePublished": "2006-11-03T00:00:00", "dateReserved": "2006-11-02T00:00:00", "dateUpdated": "2024-08-07T19:55:54.162Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:security_agent_management_center:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "916862A1-0475-4684-9C1D-DA62F6F44B2E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server."}, {"lang": "es", "value": "Cisco Security Agent Management Center (CSAMC) 5.1 versiones anteriores a 5.1.0.79 no gestiona apropiadamente errores concretos LDAP, que permite a atacantes remotos evitar requerimientos de autenticaci\u00f3n mediante una clave vac\u00eda al utilizar un servidor LDAP externo."}], "evaluatorSolution": "This vulnerability is addressed in the following product update:\r\nCisco, Security Agent Management Center, 5.1.0.79", "id": "CVE-2006-5660", "lastModified": "2017-07-20T01:33:53.557", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-11-03T00:07:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/22684"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017148"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/778648"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/30169"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/20852"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/4308"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29955"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}