CVE-2006-4313

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-23 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.

Affected products

Cisco Vpn 3000 Concentrator Series Software: 4.0, 4.0.1, 4.0.5.b, 4.1.5.b, 4.1.7.a, 4.1.7.b (+5)

References

http://secunia.com/advisories/21617
http://securitytracker.com/id?1016737
http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml
http://www.osvdb.org/28138
http://www.osvdb.org/28139
http://www.securityfocus.com/bid/19680
http://www.vupen.com/english/advisories/2006/3368
https://exchange.xforce.ibmcloud.com/vulnerabilities/28539
http://secunia.com/advisories/21617
http://securitytracker.com/id?1016737
http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml
http://www.osvdb.org/28138

Get alerted when CVE-2006-4313 or the next vulnerability affects your stack