CVE-2006-0764

Published: Feb 18, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.

Affected (6)

Products: Cisco: Anomaly Guard Module, Guard, Traffic Anomaly Detector Module

3 products

Anomaly Guard Module

Traffic Anomaly Detector Module

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Anomaly Guard Module	Version 5.0(1)
Cisco Anomaly Guard Module	Version 5.0(3)
Cisco Guard	Version 5.0(1)
Cisco Guard	Version 5.0(3)
Cisco Traffic Anomaly Detector Module	Version 5.0(1)
Cisco Traffic Anomaly Detector Module	Version 5.0(3)

References (18)

http://secunia.com/advisories/18904

Source: cve@mitre.org

http://securityreason.com/securityalert/435

Source: cve@mitre.org

http://securitytracker.com/id?1015637

Source: cve@mitre.org

http://securitytracker.com/id?1015638

Source: cve@mitre.org

http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/23237

Source: cve@mitre.org

http://www.securityfocus.com/bid/16661

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0612

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24689

Source: cve@mitre.org

http://secunia.com/advisories/18904

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/435

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015637

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015638

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/23237

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16661

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0612

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24689

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.