CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml	Patch
http://www.securityfocus.com/bid/19680
http://securitytracker.com/id?1016737
http://secunia.com/advisories/21617
http://www.osvdb.org/28138
http://www.osvdb.org/28139
http://www.vupen.com/english/advisories/2006/3368
https://exchange.xforce.ibmcloud.com/vulnerabilities/28539

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.l:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.f:::::::*

Information

Published : 2006-08-23 15:04

Updated : 2018-10-30 09:26

NVD link : CVE-2006-4313

Mitre link : CVE-2006-4313

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

cisco

vpn_3000_concentrator_series_software

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml", "name": "20060823 Cisco VPN 3000 Concentrator FTP Management Vulnerabilities", "tags": ["Patch"], "refsource": "CISCO"}, {"url": "http://www.securityfocus.com/bid/19680", "name": "19680", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1016737", "name": "1016737", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/21617", "name": "21617", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/28138", "name": "28138", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/28139", "name": "28139", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2006/3368", "name": "ADV-2006-3368", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28539", "name": "cisco-vpn-ftp-command-execute(28539)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-4313", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-08-23T22:04Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.l:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.2.f:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-30T16:26Z"}