CVE-2006-5808
First published: Wed Nov 08 2006(Updated: )
The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation".
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure | <=3.1.1.33 | |
| Cisco Secure | =3.1.1.27 | |
| <=3.1.1.33 | ||
| =3.1.1.27 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=442
- http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml
- http://www.securityfocus.com/bid/20964
- http://securitytracker.com/id?1017195
- http://secunia.com/advisories/22747
- http://www.osvdb.org/30308
- http://www.vupen.com/english/advisories/2006/4409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30128
Frequently Asked Questions
What is the severity of CVE-2006-5808?
CVE-2006-5808 has a critical severity rating due to its potential for local privilege escalation.
How do I fix CVE-2006-5808?
To mitigate CVE-2006-5808, upgrade to Cisco Secure Desktop version 3.1.1.45 or later, ensuring secure permissions are set.
Who is affected by CVE-2006-5808?
CVE-2006-5808 affects all users of Cisco Secure Desktop versions prior to 3.1.1.45.
What type of vulnerability is CVE-2006-5808?
CVE-2006-5808 is classified as a local privilege escalation vulnerability.
Can CVE-2006-5808 be exploited remotely?
CVE-2006-5808 is not a remote vulnerability; it requires local access to exploit.
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco secure
- version/cisco secure/3.1.1.33
- version/cisco secure/3.1.1.27