CVE-2006-3290
First published: Wed Jun 28 2006(Updated: )
HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless Control System software | <=3.2\(51\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml
- http://www.securityfocus.com/bid/18701
- http://securitytracker.com/id?1016398
- http://secunia.com/advisories/20870
- http://www.osvdb.org/26879
- http://www.vupen.com/english/advisories/2006/2583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27442
Frequently Asked Questions
What is the severity of CVE-2006-3290?
CVE-2006-3290 is categorized as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2006-3290?
To fix CVE-2006-3290, upgrade your Cisco Wireless Control System software to a version above 3.2(51).
What systems are affected by CVE-2006-3290?
CVE-2006-3290 affects Cisco Wireless Control System for both Linux and Windows prior to version 3.2(51).
What kind of information can be accessed due to CVE-2006-3290?
CVE-2006-3290 allows remote attackers to access sensitive information, including usernames and directory paths.
Is there a known exploit for CVE-2006-3290?
While there may not be public exploits available, CVE-2006-3290 presents a significant risk of unauthorized access if left unpatched.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/author
- agent/references
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco wireless control system software
- version/cisco wireless control system software/3.2\(51\)