CVE-2006-4315

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-23 · updated 2026-06-16

Description

Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might allow local users to gain privileges via a malicious program file under "Program Files" or its subdirectories.

Affected products

SSH Tectia Client: 4.0, 4.0.1, 4.0.3, 4.0.4, 4.0.5, 4.2 (+19)
SSH Tectia Connector: 5.0, 5.0.1
SSH Tectia Manager: 1.3, 1.4, 2.1.2
SSH Tectia Server: 4.0, 4.0.3, 4.0.4, 4.0.5, 4.2.1, 4.3 (+14)

References

http://securitytracker.com/id?1016743
http://www.securityfocus.com/bid/19679
http://www.ssh.com/company/news/2006/english/security/article/775/
https://exchange.xforce.ibmcloud.com/vulnerabilities/28566
http://securitytracker.com/id?1016743
http://www.securityfocus.com/bid/19679
http://www.ssh.com/company/news/2006/english/security/article/775/
https://exchange.xforce.ibmcloud.com/vulnerabilities/28566

Get alerted when CVE-2006-4315 or the next vulnerability affects your stack