VDB
CVE-2006-5808
CVE-2006-5808
PUBLISHED
CVSS 4.599999904632568 MEDIUM
The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation".
EPSS 0.36% · 27.6th percentile
Risk Scores
CVSS 2.0
4.599999904632568
EPSS Score
0.36%
27.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| cisco | secure_desktop | 0, 3.1.1.27 |
Timeline
- Nov 8, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
References
- 1017195 vdb
- 22747 third-party-advisory
- 20061108 Multiple Vulnerabilities in Cisco Secure Desktop vendor-advisory
- 30308 vdb
- cisco-csd-permissions-code-execution(30128) vdb
- 20061108 Cisco Secure Desktop Privilege Escalation Vulnerability third-party-advisory
- ADV-2006-4409 vdb
- 20964 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-5808 advisory