CVE-2006-0764

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-18 · updated 2026-06-16

Description

The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.

Affected products

Cisco Anomaly Guard Module: 5.0(1), 5.0(3)
Cisco Guard: 5.0(1), 5.0(3)
Cisco Traffic Anomaly Detector Module: 5.0(1), 5.0(3)

References

http://secunia.com/advisories/18904
http://securityreason.com/securityalert/435
http://securitytracker.com/id?1015637
http://securitytracker.com/id?1015638
http://www.cisco.com/en/US/products/products_security_advisory09186a008060519a.shtml
http://www.osvdb.org/23237
http://www.securityfocus.com/bid/16661
http://www.vupen.com/english/advisories/2006/0612
https://exchange.xforce.ibmcloud.com/vulnerabilities/24689
http://secunia.com/advisories/18904
http://securityreason.com/securityalert/435
http://securitytracker.com/id?1015637

Get alerted when CVE-2006-0764 or the next vulnerability affects your stack