github - ghsa-fh6r-83vr-8h93

ghsa-fh6r-83vr-8h93

Vulnerability from github

Published

2022-05-01 07:17

Modified

2022-05-01 07:17

Details

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-4312"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-08-23T22:04:00Z",
    "severity": "MODERATE"
  },
  "details": "Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a \"non-random value\" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.",
  "id": "GHSA-fh6r-83vr-8h93",
  "modified": "2022-05-01T07:17:28Z",
  "published": "2022-05-01T07:17:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4312"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21616"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016738"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016739"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016740"
    },
    {
      "type": "WEB",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/28143"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/19681"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/3367"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2006-4312

Vulnerability from cvelistv5

Published

2006-08-23 22:00

Modified

2024-08-07 19:06

Severity ?

Summary

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2006/3367	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016740	vdb-entry, x_refsource_SECTRACK
	http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml	vendor-advisory, x_refsource_CISCO
	http://www.securityfocus.com/bid/19681	vdb-entry, x_refsource_BID
	http://www.osvdb.org/28143	vdb-entry, x_refsource_OSVDB
	http://securitytracker.com/id?1016738	vdb-entry, x_refsource_SECTRACK
	http://securitytracker.com/id?1016739	vdb-entry, x_refsource_SECTRACK
	https://exchange.xforce.ibmcloud.com/vulnerabilities/28540	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/21616	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:06:07.253Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-3367",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3367"
          },
          {
            "name": "1016740",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016740"
          },
          {
            "name": "20060823 Unintentional Password Modification Vulnerability in Cisco Firewall Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml"
          },
          {
            "name": "19681",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19681"
          },
          {
            "name": "28143",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/28143"
          },
          {
            "name": "1016738",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016738"
          },
          {
            "name": "1016739",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016739"
          },
          {
            "name": "cisco-pix-password-modification(28540)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540"
          },
          {
            "name": "21616",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21616"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a \"non-random value\" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-3367",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3367"
        },
        {
          "name": "1016740",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016740"
        },
        {
          "name": "20060823 Unintentional Password Modification Vulnerability in Cisco Firewall Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml"
        },
        {
          "name": "19681",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19681"
        },
        {
          "name": "28143",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/28143"
        },
        {
          "name": "1016738",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016738"
        },
        {
          "name": "1016739",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016739"
        },
        {
          "name": "cisco-pix-password-modification(28540)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540"
        },
        {
          "name": "21616",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21616"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-4312",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a \"non-random value\" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-3367",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3367"
            },
            {
              "name": "1016740",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016740"
            },
            {
              "name": "20060823 Unintentional Password Modification Vulnerability in Cisco Firewall Products",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml"
            },
            {
              "name": "19681",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19681"
            },
            {
              "name": "28143",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/28143"
            },
            {
              "name": "1016738",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016738"
            },
            {
              "name": "1016739",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016739"
            },
            {
              "name": "cisco-pix-password-modification(28540)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28540"
            },
            {
              "name": "21616",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21616"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-4312",
    "datePublished": "2006-08-23T22:00:00",
    "dateReserved": "2006-08-23T00:00:00",
    "dateUpdated": "2024-08-07T19:06:07.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted