CVE-2006-5808

Cisco Secure Desktop < 3.1.1.45 - Local Privilege Escalation via Insecure Directory Permissions

Title source: llm
STIX 2.1

Description

The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation".

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30128
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017195
Patch, Vendor Advisory third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=442
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22747
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4409
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/30308
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20964

Scores

EPSS 0.0036
EPSS Percentile 28.4%

Details

Status published
Products (2)
cisco/secure_desktop 3.1.1.27
cisco/secure_desktop < 3.1.1.33
Published Nov 08, 2006
Tracked Since Feb 18, 2026