CVE-2006-0486

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-01 · updated 2026-06-16

Description

Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770.

Affected products

Cisco IOS: 12.2(25)s, 12.3t, 12.4

References

http://secunia.com/advisories/18613
http://securitytracker.com/id?1015543
http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml
http://www.osvdb.org/22723
https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905
http://secunia.com/advisories/18613
http://securitytracker.com/id?1015543
http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml
http://www.osvdb.org/22723
https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905

Get alerted when CVE-2006-0486 or the next vulnerability affects your stack