CVE-2006-1672

Published: Apr 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.

Affected (24)

Products: Cisco: Transport Controller, Ons 15310 Cl Series, Ons 15454 Mspp, Ons 15600, Optical Networking Systems Software

5 products

Optical Networking Systems Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Transport Controller	Version 4.0.x

Configuration B

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Ons 15310 Cl Series	Version 0
Cisco Ons 15454 Mspp	All versions
Cisco Ons 15600	Version 0
Cisco Optical Networking Systems Software	Version 1.0
Cisco Optical Networking Systems Software	Version 1.1
Cisco Optical Networking Systems Software	Version 1.1(0)
Cisco Optical Networking Systems Software	Version 1.1(1)
Cisco Optical Networking Systems Software	Version 1.3(0)
Cisco Optical Networking Systems Software	Version 3.0
Cisco Optical Networking Systems Software	Version 3.1.0
Cisco Optical Networking Systems Software	Version 3.2
Cisco Optical Networking Systems Software	Version 3.3.0
Cisco Optical Networking Systems Software	Version 3.4.0
Cisco Optical Networking Systems Software	Version 4.0.0
Cisco Optical Networking Systems Software	Version 4.0(1)
Cisco Optical Networking Systems Software	Version 4.0(2)
Cisco Optical Networking Systems Software	Version 4.1.4
Cisco Optical Networking Systems Software	Version 4.1(0)
Cisco Optical Networking Systems Software	Version 4.1(1)
Cisco Optical Networking Systems Software	Version 4.1(2)
Cisco Optical Networking Systems Software	Version 4.1(3)
Cisco Optical Networking Systems Software	Version 4.6(0)
Cisco Optical Networking Systems Software	Version 4.6(1)