CVE-2006-5394

The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://securitytracker.com/id?1017018
http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml	Vendor Advisory
http://www.securityfocus.com/bid/20410
http://securitytracker.com/id?1017018
http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml	Vendor Advisory
http://www.securityfocus.com/bid/20410

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:19

Type	Values Removed	Values Added
References	~~() http://securitytracker.com/id?1017018 -~~	() http://securitytracker.com/id?1017018 -
References	~~() http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml - Vendor Advisory~~	() http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/20410 -~~	() http://www.securityfocus.com/bid/20410 -

Information

Published : 2006-10-18 19:07

Updated : 2024-11-21 00:19

NVD link : CVE-2006-5394

Mitre link : CVE-2006-5394

CVE.ORG link : CVE-2006-5394

JSON object : View

Products Affected

cisco

secure_desktop

CWE

NVD-CWE-Other

{"id": "CVE-2006-5394", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-10-18T19:07:00.000", "references": [{"url": "http://securitytracker.com/id?1017018", "source": "cve@mitre.org"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20410", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017018", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/20410", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The default configuration of Cisco Secure Desktop (CSD) has an unchecked \"Disable printing\" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session."}, {"lang": "es", "value": "La configuraci\u00f3n por defecto del Cisco Secure Desktop (CSD)-Escritorio de Seguridad de Cisco- tiene deshabilitada la opci\u00f3n \"Disable printing\" en la Secure Desktop Settings -Configuraci\u00f3n de Seguridad del Escritorio-, lo que permite a los usuarios locales la lectura de datos que fueron enviados a la impresora durante otra sesi\u00f3n SSL VPN para un usuario diferente."}], "lastModified": "2024-11-21T00:19:03.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F91DD0D2-B573-4FE3-933A-02E8F4D35E56"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}