CVE-2006-5660

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-03 · updated 2026-06-16

Description

Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server.

Affected products

Cisco Security Agent Management Center: 5.1

References

http://secunia.com/advisories/22684
http://securitytracker.com/id?1017148
http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml
http://www.kb.cert.org/vuls/id/778648
http://www.osvdb.org/30169
http://www.securityfocus.com/bid/20852
http://www.vupen.com/english/advisories/2006/4308
https://exchange.xforce.ibmcloud.com/vulnerabilities/29955
http://secunia.com/advisories/22684
http://securitytracker.com/id?1017148
http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml
http://www.kb.cert.org/vuls/id/778648

Get alerted when CVE-2006-5660 or the next vulnerability affects your stack