Vulnerability-Lookup - Search a vulnerability

Vulnerabilites related to cisco - user_registration_tool

CVE-2006-1961 (GCVE-0-2006-1961)

Vulnerability from cvelistv5

Published

2006-04-21 10:00

Modified

2024-08-07 17:35

Severity ?

CWE

Summary

Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.

References

►

URL

Tags

	http://www.osvdb.org/24813	vdb-entry, x_refsource_OSVDB
	http://www.vupen.com/english/advisories/2006/1435	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/17609	vdb-entry, x_refsource_BID
	http://www.assurance.com.au/advisories/200604-cisco.txt	x_refsource_MISC
	https://exchange.xforce.ibmcloud.com/vulnerabilities/25884	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/archive/1/431371/30/5490/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/19736	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/431367/30/5490/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/19739	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/1434	vdb-entry, x_refsource_VUPEN
	http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml	vendor-advisory, x_refsource_CISCO
	http://secunia.com/advisories/19741	third-party-advisory, x_refsource_SECUNIA
	http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml	vendor-advisory, x_refsource_CISCO
	http://securitytracker.com/id?1015965	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:30.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24813",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24813"
          },
          {
            "name": "ADV-2006-1435",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1435"
          },
          {
            "name": "17609",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
          },
          {
            "name": "cisco-wlse-shell-privilege-escalation(25884)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
          },
          {
            "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
          },
          {
            "name": "19736",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19736"
          },
          {
            "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
          },
          {
            "name": "19739",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19739"
          },
          {
            "name": "ADV-2006-1434",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1434"
          },
          {
            "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
          },
          {
            "name": "19741",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19741"
          },
          {
            "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
          },
          {
            "name": "1015965",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015965"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application\u0027s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24813",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24813"
        },
        {
          "name": "ADV-2006-1435",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1435"
        },
        {
          "name": "17609",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
        },
        {
          "name": "cisco-wlse-shell-privilege-escalation(25884)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
        },
        {
          "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
        },
        {
          "name": "19736",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19736"
        },
        {
          "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
        },
        {
          "name": "19739",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19739"
        },
        {
          "name": "ADV-2006-1434",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1434"
        },
        {
          "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
        },
        {
          "name": "19741",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19741"
        },
        {
          "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
        },
        {
          "name": "1015965",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015965"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application\u0027s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24813",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24813"
            },
            {
              "name": "ADV-2006-1435",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1435"
            },
            {
              "name": "17609",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17609"
            },
            {
              "name": "http://www.assurance.com.au/advisories/200604-cisco.txt",
              "refsource": "MISC",
              "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
            },
            {
              "name": "cisco-wlse-shell-privilege-escalation(25884)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
            },
            {
              "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
            },
            {
              "name": "19736",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19736"
            },
            {
              "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
            },
            {
              "name": "19739",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19739"
            },
            {
              "name": "ADV-2006-1434",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1434"
            },
            {
              "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
            },
            {
              "name": "19741",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19741"
            },
            {
              "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
            },
            {
              "name": "1015965",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015965"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1961",
    "datePublished": "2006-04-21T10:00:00",
    "dateReserved": "2006-04-21T00:00:00",
    "dateUpdated": "2024-08-07T17:35:30.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd