CVE-2006-5660

Description

Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29955

http://www.vupen.com/english/advisories/2006/4308

http://www.securityfocus.com/bid/20852

http://www.osvdb.org/30169

http://www.kb.cert.org/vuls/id/778648

http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml

http://securitytracker.com/id?1017148

http://secunia.com/advisories/22684

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS