Vulnerabilites related to cisco - user_registration_tool
Vulnerability from fkie_nvd
Published
2006-04-21 10:02
Modified
2024-11-21 00:10
Severity ?
Summary
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.
References
cve@mitre.orghttp://secunia.com/advisories/19736Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/19739
cve@mitre.orghttp://secunia.com/advisories/19741
cve@mitre.orghttp://securitytracker.com/id?1015965Patch
cve@mitre.orghttp://www.assurance.com.au/advisories/200604-cisco.txt
cve@mitre.orghttp://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlPatch
cve@mitre.orghttp://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtmlPatch
cve@mitre.orghttp://www.osvdb.org/24813
cve@mitre.orghttp://www.securityfocus.com/archive/1/431367/30/5490/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/431371/30/5490/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/17609
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1434
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1435
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25884
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19736Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19739
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19741
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015965Patch
af854a3a-2127-422b-91ae-364da2661108http://www.assurance.com.au/advisories/200604-cisco.txt
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlPatch
af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtmlPatch
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24813
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/431367/30/5490/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/431371/30/5490/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17609
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1434
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1435
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25884



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:user_registration_tool:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "441C9430-C57D-48F5-8C6F-B64759ED5777",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E89560E-5A06-44F5-82AB-AEB9AD7B97DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:express:*:*:*:*:*",
              "matchCriteriaId": "FBF2B953-773A-4E47-9EEA-4826354650EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D54C89F2-D5F5-412D-85C6-1CD76E03BE26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:express:*:*:*:*:*",
              "matchCriteriaId": "2AA97244-E7A9-49A2-9414-E5860AF3611D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E013901C-1B1E-4839-867B-D647A996BF60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:express:*:*:*:*:*",
              "matchCriteriaId": "055B35BB-602A-4C26-A0D4-6614D1B09A97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B228B395-6964-449D-9B09-D7BFE31E9851",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:express:*:*:*:*:*",
              "matchCriteriaId": "D5344233-E08D-4066-86CD-D9D9B84B039D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "25B36A82-33BE-4BA4-9B4A-36D685607A4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:express:*:*:*:*:*",
              "matchCriteriaId": "337C5C2C-2A2C-4C94-9DBF-2BB795BEEF1A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3D72DCA-130D-4507-BDAC-A6183D08BC2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:express:*:*:*:*:*",
              "matchCriteriaId": "6AAF32A3-4D70-4E1A-9FBE-A465F3910B57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "87C22C0D-2E74-44B8-BAF1-FACBE7B7A497",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.6:*:express:*:*:*:*:*",
              "matchCriteriaId": "5BD43E20-9E43-46FB-952A-EE181D87F116",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BB965A0-7FB2-4DF7-82C8-D0AB4E8AE4CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.7:*:express:*:*:*:*:*",
              "matchCriteriaId": "0A5BDD7D-7321-4061-9E43-3DB613768945",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6C66F51-37FC-4CEF-A532-17522EE32BAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.8:*:express:*:*:*:*:*",
              "matchCriteriaId": "F6EA38AC-8E50-45FF-8F17-C679E165269D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F560405-DD99-4D09-9D9B-19F88A63C689",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.9:*:express:*:*:*:*:*",
              "matchCriteriaId": "27C389A3-27DC-4EAB-A08C-60BF1774351B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBBAC34E-4572-48D2-B7B5-5AB623A35A42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.10:*:express:*:*:*:*:*",
              "matchCriteriaId": "35CFCBC7-68A8-407D-9983-FBA414318880",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CA72C62-7004-4A5C-BEA5-5ACA55279366",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.11:*:express:*:*:*:*:*",
              "matchCriteriaId": "0C6865FB-479A-41F0-89ED-BF02E80D9FDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ADEEA82-4371-4D25-8CEB-F6F8B32ED9F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.12:*:express:*:*:*:*:*",
              "matchCriteriaId": "BF202456-0666-4DBB-8918-B30B83850201",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC9515C2-5549-4EBC-8FF1-8C75E92794D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:2.13:*:express:*:*:*:*:*",
              "matchCriteriaId": "3D994D17-087E-450B-A5DE-F56949717C6C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:ciscoworks_2000_service_management_solution:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "10CAB6F5-563C-4E8A-B769-45B1981BADF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:hosting_solution_engine:1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "9405E712-6682-4DCE-AA18-311A2D6AA958",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:hosting_solution_engine:1.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDA1DA2E-FD49-46B1-96E0-1129B16A8DD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:hosting_solution_engine:1.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D44C3E02-A17C-48A2-8173-358570C2ACAB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:hosting_solution_engine:1.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DA04953-EBE5-482D-83F9-30F10F739C31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:hosting_solution_engine:1.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADE85A5A-2CF3-49FB-A15C-49EA56338FBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ethernet_subscriber_solution_engine:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6290FDDC-8965-4045-900E-933D85511F67",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application\u0027s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
    }
  ],
  "id": "CVE-2006-1961",
  "lastModified": "2024-11-21T00:10:11.787",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-04-21T10:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19736"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19739"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19741"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015965"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24813"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17609"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1434"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1435"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19736"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19739"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19741"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1015965"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24813"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17609"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1434"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1435"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

cve-2006-1961
Vulnerability from cvelistv5
Published
2006-04-21 10:00
Modified
2024-08-07 17:35
Severity ?
Summary
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE). NOTE: other issues might be addressed by the Cisco advisory.
References
http://www.osvdb.org/24813vdb-entry, x_refsource_OSVDB
http://www.vupen.com/english/advisories/2006/1435vdb-entry, x_refsource_VUPEN
http://www.securityfocus.com/bid/17609vdb-entry, x_refsource_BID
http://www.assurance.com.au/advisories/200604-cisco.txtx_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/25884vdb-entry, x_refsource_XF
http://www.securityfocus.com/archive/1/431371/30/5490/threadedmailing-list, x_refsource_BUGTRAQ
http://secunia.com/advisories/19736third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/431367/30/5490/threadedmailing-list, x_refsource_BUGTRAQ
http://secunia.com/advisories/19739third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1434vdb-entry, x_refsource_VUPEN
http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlvendor-advisory, x_refsource_CISCO
http://secunia.com/advisories/19741third-party-advisory, x_refsource_SECUNIA
http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtmlvendor-advisory, x_refsource_CISCO
http://securitytracker.com/id?1015965vdb-entry, x_refsource_SECTRACK
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:30.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24813",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24813"
          },
          {
            "name": "ADV-2006-1435",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1435"
          },
          {
            "name": "17609",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17609"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
          },
          {
            "name": "cisco-wlse-shell-privilege-escalation(25884)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
          },
          {
            "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
          },
          {
            "name": "19736",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19736"
          },
          {
            "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
          },
          {
            "name": "19739",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19739"
          },
          {
            "name": "ADV-2006-1434",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1434"
          },
          {
            "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
          },
          {
            "name": "19741",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19741"
          },
          {
            "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
          },
          {
            "name": "1015965",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015965"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application\u0027s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24813",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24813"
        },
        {
          "name": "ADV-2006-1435",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1435"
        },
        {
          "name": "17609",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17609"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
        },
        {
          "name": "cisco-wlse-shell-privilege-escalation(25884)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
        },
        {
          "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
        },
        {
          "name": "19736",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19736"
        },
        {
          "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
        },
        {
          "name": "19739",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19739"
        },
        {
          "name": "ADV-2006-1434",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1434"
        },
        {
          "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
        },
        {
          "name": "19741",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19741"
        },
        {
          "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
        },
        {
          "name": "1015965",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015965"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the \"show\" command in the application\u0027s command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24813",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24813"
            },
            {
              "name": "ADV-2006-1435",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1435"
            },
            {
              "name": "17609",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17609"
            },
            {
              "name": "http://www.assurance.com.au/advisories/200604-cisco.txt",
              "refsource": "MISC",
              "url": "http://www.assurance.com.au/advisories/200604-cisco.txt"
            },
            {
              "name": "cisco-wlse-shell-privilege-escalation(25884)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25884"
            },
            {
              "name": "20060419 Multiple vulnerabilities in Linux based Cisco products",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431371/30/5490/threaded"
            },
            {
              "name": "19736",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19736"
            },
            {
              "name": "20060419 Re: Multiple vulnerabilities in Linux based Cisco products",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431367/30/5490/threaded"
            },
            {
              "name": "19739",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19739"
            },
            {
              "name": "ADV-2006-1434",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1434"
            },
            {
              "name": "20060419 Multiple Vulnerabilities in the WLSE Appliance",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml"
            },
            {
              "name": "19741",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19741"
            },
            {
              "name": "20060419 Response to Privilege Escalation on Multiple Cisco Products",
              "refsource": "CISCO",
              "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml"
            },
            {
              "name": "1015965",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015965"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1961",
    "datePublished": "2006-04-21T10:00:00",
    "dateReserved": "2006-04-21T00:00:00",
    "dateUpdated": "2024-08-07T17:35:30.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}