CVE-2006-0485: Medium severity cisco ios vulnerability

Published Feb 1, 2006

Updated

The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.

Affected Software

130 affected components

Cisco IOS=12.0t

Cisco IOS=12.0xh

Cisco IOS=12.0xk

Cisco IOS=12.0xl

Cisco IOS=12.0xn

Cisco IOS=12.0xr

Cisco IOS=12.1

Cisco IOS=12.1aa

Cisco IOS=12.1e

Cisco IOS=12.1ec

Cisco IOS=12.1ez

Cisco IOS=12.1ga

Cisco IOS=12.1gb

Cisco IOS=12.1t

Cisco IOS=12.1xa

Cisco IOS=12.1xe

Cisco IOS=12.1xh

Cisco IOS=12.1xi

Cisco IOS=12.1xj

Cisco IOS=12.1xl

Cisco IOS=12.1xm

Cisco IOS=12.1xp

Cisco IOS=12.1xq

Cisco IOS=12.1xs

Cisco IOS=12.1xt

Cisco IOS=12.1xu

Cisco IOS=12.1xv

Cisco IOS=12.1xw

Cisco IOS=12.1xy

Cisco IOS=12.1xz

Cisco IOS=12.1ya

Cisco IOS=12.1yb

Cisco IOS=12.1yd

Cisco IOS=12.1ye

Cisco IOS=12.1yf

Cisco IOS=12.1yh

Cisco IOS=12.1yi

Cisco IOS=12.2

Cisco IOS=12.2b

Cisco IOS=12.2bw

Cisco IOS=12.2by

Cisco IOS=12.2dd

Cisco IOS=12.2dx

Cisco IOS=12.2mx

Cisco IOS=12.2n

Cisco IOS=12.2s

Cisco IOS=12.2su

Cisco IOS=12.2sw

Cisco IOS=12.2sxb

Cisco IOS=12.2sxd

Cisco IOS=12.2sxe

Cisco IOS=12.2sz

Cisco IOS=12.2xa

Cisco IOS=12.2xb

Cisco IOS=12.2xc

Cisco IOS=12.2xd

Cisco IOS=12.2xg

Cisco IOS=12.2xh

Cisco IOS=12.2xj

Cisco IOS=12.2xk

Cisco IOS=12.2xl

Cisco IOS=12.2xm

Cisco IOS=12.2xq

Cisco IOS=12.2xs

Cisco IOS=12.2xt

Cisco IOS=12.2xu

Cisco IOS=12.2xv

Cisco IOS=12.2xw

Cisco IOS=12.2yb

Cisco IOS=12.2yc

Cisco IOS=12.2yd

Cisco IOS=12.2ye

Cisco IOS=12.2yh

Cisco IOS=12.2yk

Cisco IOS=12.2yl

Cisco IOS=12.2ym

Cisco IOS=12.2yn

Cisco IOS=12.2yt

Cisco IOS=12.2yu

Cisco IOS=12.2yw

Cisco IOS=12.2yx

Cisco IOS=12.2yy

Cisco IOS=12.2yz

Cisco IOS=12.2zb

Cisco IOS=12.2zc

Cisco IOS=12.2zd

Cisco IOS=12.2ze

Cisco IOS=12.2zf

Cisco IOS=12.2zh

Cisco IOS=12.2zj

Cisco IOS=12.2zl

Cisco IOS=12.2zn

Cisco IOS=12.2zp

Cisco IOS=12.3

Cisco IOS=12.3\(11\)yk2

Cisco IOS=12.3\(11\)yl

Cisco IOS=12.3b

Cisco IOS=12.3t

Cisco IOS=12.3xa

Cisco IOS=12.3xb

Cisco IOS=12.3xd

Cisco IOS=12.3xe

Cisco IOS=12.3xf

Cisco IOS=12.3xg

Cisco IOS=12.3xh

Cisco IOS=12.3xi

Cisco IOS=12.3xj

Cisco IOS=12.3xk

Cisco IOS=12.3xm

Cisco IOS=12.3xq

Cisco IOS=12.3xr

Cisco IOS=12.3xw

Cisco IOS=12.3xy

Cisco IOS=12.3ya

Cisco IOS=12.3yb

Cisco IOS=12.3yf

Cisco IOS=12.3yg

Cisco IOS=12.3yh

Cisco IOS=12.3yi

Cisco IOS=12.3yj

Cisco IOS=12.3yk

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.3ys

Cisco IOS=12.3yt

Cisco IOS=12.3yu

Cisco IOS=12.3yx

Cisco IOS=12.4

Cisco IOS=12.4mr

Cisco IOS=12.4t

Event History

Feb 1, 2006

CVE Published

02:02 AM

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0485?

CVE-2006-0485 is classified as high severity due to the lack of Authentication, Authorization, and Accounting checks in Cisco IOS.

How do I fix CVE-2006-0485?

To fix CVE-2006-0485, you should upgrade to a fixed version of Cisco IOS that addresses the vulnerability.

Who is affected by CVE-2006-0485?

CVE-2006-0485 affects local users of Cisco IOS versions 12.2(14)S prior to 12.2(14)S16 and multiple other releases.

What are the consequences of CVE-2006-0485?

The consequences of CVE-2006-0485 include unauthorized access, allowing local users to execute IOS EXEC commands without proper authorization.

What versions of Cisco IOS are vulnerable to CVE-2006-0485?

CVE-2006-0485 affects several versions of Cisco IOS, including 12.2(14)S before 12.2(14)S16 and other specified releases.