Description
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.
References (9)
Core 9
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18904
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16661
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015638
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24689
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/435
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0612
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015637
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/23237
Scores
EPSS
0.0198
EPSS Percentile
78.5%
Details
Status
published
Products (6)
cisco/anomaly_guard_module
5.0\(1\)
cisco/anomaly_guard_module
5.0\(3\)
cisco/guard
5.0\(1\)
cisco/guard
5.0\(3\)
cisco/traffic_anomaly_detector_module
5.0\(1\)
cisco/traffic_anomaly_detector_module
5.0\(3\)
Published
Feb 18, 2006
Tracked Since
Feb 18, 2026