CVE-2006-0485
Cisco IOS <12.2(14)S16-25 Jan 2006 - Local Privilege Escalation
Title source: llmDescription
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015543
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/34892
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18613
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0337
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16383
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
Scores
EPSS
0.0036
EPSS Percentile
28.2%
Details
Status
published
Products (50)
cisco/ios
12.0t
cisco/ios
12.0xh
cisco/ios
12.0xk
cisco/ios
12.0xl
cisco/ios
12.0xn
cisco/ios
12.0xr
cisco/ios
12.1
cisco/ios
12.1aa
cisco/ios
12.1e
cisco/ios
12.1ec
... and 40 more
Published
Feb 01, 2006
Tracked Since
Feb 18, 2026