VAR-200608-0174
Vulnerability from variot - Updated: 2023-12-18 13:25The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms. The Cisco NAC Agent is prone to a security-bypass vulnerability because of a design error in the application. An attacker can exploit this issue to bypass security restrictions. This results in a false sense of security and may aid attackers in further attacks. An attacker can connect to the network by changing the default parameters of the Windows TCP/IP stack and using a custom HTTPS client (instead of a browser) to bypass host authentication
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200608-0174",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4.5"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.6.0.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5.5"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.6.4.0.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.5"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4.2"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.3"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5.2"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.8"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.4"
},
{
"model": "network admission control",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "3.6.4.1"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4.3"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5.3"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5.4"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.7"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4.4"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.5\\(9\\)"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.6"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.2"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.4"
},
{
"model": "network admission control manager and server system software",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "3.3.9"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.6.4.0.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.6.0.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5.5"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5.4"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5.3"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5.2"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "3.5"
},
{
"model": "network admission control appliance",
"scope": "lte",
"trust": 0.8,
"vendor": "cisco",
"version": "3.6.4.1"
},
{
"model": "clean access",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "network admission control",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "3.6.4.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "3.5\\(9\\)"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.5(9)"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4.5"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4.4"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4.3"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4.2"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.4"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.9"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.8"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.7"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.6"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.5"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.4"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.3"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.2"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3.1"
},
{
"model": "clean access",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "3.3"
}
],
"sources": [
{
"db": "BID",
"id": "19726"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5\\(9\\):*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.4.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.6.4.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4430"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Andreas Gal http://www.andreasgal.com/ http://www.feise.com/",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
],
"trust": 0.6
},
"cve": "CVE-2006-4430",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2006-4430",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-20538",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2006-4430",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200608-450",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-20538",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-20538"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms. The Cisco NAC Agent is prone to a security-bypass vulnerability because of a design error in the application. \nAn attacker can exploit this issue to bypass security restrictions. This results in a false sense of security and may aid attackers in further attacks. An attacker can connect to the network by changing the default parameters of the Windows TCP/IP stack and using a custom HTTPS client (instead of a browser) to bypass host authentication",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "BID",
"id": "19726"
},
{
"db": "VULHUB",
"id": "VHN-20538"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-4430",
"trust": 2.5
},
{
"db": "BID",
"id": "19726",
"trust": 2.0
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20060826 NAC AGENT INSTALLATION BYPASS",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20060822 RESPONSE TO BUGTRAQ - CISCO CLEAN ACCESS AGENT (PERFIGO) BYPASS",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20050819 CISCO CLEAN ACCESS AGENT (PERFIGO) BYPASS",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20060826 RE: CISCO NAC APPLIANCE AGENT INSTALLATION BYPASS VULNERABILITY",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20050822 RE: CISCO CLEAN ACCESS AGENT (PERFIGO) BYPASS",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20060829 RE: CISCO NAC APPLIANCE AGENT INSTALLATION BYPASS VULNERABILITY",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20060826 CISCO NAC APPLIANCE AGENT INSTALLATION BYPASS VULNERABILITY",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-20538",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-20538"
},
{
"db": "BID",
"id": "19726"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"id": "VAR-200608-0174",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-20538"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:25:51.441000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Document ID: 66147",
"trust": 0.8,
"url": "http://www.cisco.com/en/us/products/ps6128/products_security_notice09186a00804fa82b.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4430"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19726"
},
{
"trust": 1.7,
"url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/archive/1/444501/100/0/threaded"
},
{
"trust": 1.7,
"url": "http://www.cisco.com/en/us/products/ps6128/products_security_notice09186a00804fa82b.html"
},
{
"trust": 1.7,
"url": "http://www.cisco.com/en/us/products/ps6128/tsd_products_security_response09186a008071d609.html"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/408603/30/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/444424/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/444737/100/0/threaded"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4430"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4430"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/444737/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/444424/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/408603/30/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps6128/index.html"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/warp/public/707/cisco-sr-20060826-nac.shtml"
},
{
"trust": 0.3,
"url": "/archive/1/444424"
},
{
"trust": 0.3,
"url": "/archive/1/444501"
},
{
"trust": 0.3,
"url": "/archive/1/444737"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-20538"
},
{
"db": "BID",
"id": "19726"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-20538"
},
{
"db": "BID",
"id": "19726"
},
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-20538"
},
{
"date": "2006-08-26T00:00:00",
"db": "BID",
"id": "19726"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"date": "2006-08-29T00:04:00",
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"date": "2006-08-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-30T00:00:00",
"db": "VULHUB",
"id": "VHN-20538"
},
{
"date": "2006-09-04T18:48:00",
"db": "BID",
"id": "19726"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2005-000895"
},
{
"date": "2018-10-30T16:26:16.340000",
"db": "NVD",
"id": "CVE-2006-4430"
},
{
"date": "2006-09-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco NAC Vulnerabilities that bypass local and remote protection mechanisms",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2005-000895"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "19726"
},
{
"db": "CNNVD",
"id": "CNNVD-200608-450"
}
],
"trust": 0.9
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…