Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-4313 | First vendor Publication | 2006-08-23 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4313 |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 28139 | Cisco VPN 3000 Concentrator FTP Management Unauthorized Command Execution (CS... VPN 3000 Concentrator contains a flaw that may allow a malicious user to bypass certain security restrictions. The issue is triggered due to unspecified errors when using FTP as a management protocol and can be exploited to run the 'CWD', 'MKD', 'CDUP', 'RNFR', 'SIZE', and 'RMD' commands without being authenticated. It is possible that the flaw may allow deleting configuration files and certificates resulting in a loss of integrity. |
| 28138 | Cisco VPN 3000 Concentrator FTP Management Unauthorized Command Execution (CS... VPN 3000 Concentrator contains a flaw that may allow a malicious user to bypass certain security restrictions. The issue is triggered due to unspecified errors when using FTP as a management protocol and can be exploited to run the 'CWD', 'MKD', 'CDUP', 'RNFR', 'SIZE', and 'RMD' commands without being authenticated. It is possible that the flaw may allow deleting configuration files and certificates resulting in a loss of integrity. |
Metasploit Database
| id | Description |
|---|---|
| 2006-08-23 | Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:19:42 |
|
| 2024-11-28 12:09:48 |
|
| 2021-05-04 12:04:28 |
|
| 2021-04-22 01:05:07 |
|
| 2020-07-16 21:22:49 |
|
| 2020-05-23 13:16:47 |
|
| 2020-05-23 00:18:16 |
|
| 2018-10-31 00:19:46 |
|
| 2017-07-20 09:23:50 |
|
| 2016-06-28 15:55:25 |
|
| 2016-04-26 14:59:31 |
|
| 2013-05-11 11:06:52 |
|
