[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

251782

 
 

909

 
 

196543

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-4312Date: (C)2006-08-23   (M)2023-12-22


Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 3.1
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication:
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1016738
SECTRACK-1016739
SECTRACK-1016740
BID-19681
http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml
SECUNIA-21616
OSVDB-28143
ADV-2006-3367
cisco-pix-password-modification(28540)

CPE    9
cpe:/h:cisco:pix_firewall_501
cpe:/h:cisco:pix_firewall_520
cpe:/h:cisco:pix_firewall:6.3
cpe:/h:cisco:pix_firewall_515e
...

© SecPod Technologies