Vulnerabilities > CVE-2006-5808 - Multiple vulnerability in Cisco Secure Desktop

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
cisco
NVD
Published: 2006-11-08
Updated: 2017-07-20

Summary

The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation". This vulnerability is addressed in the following product release: Cisco, Cisco Secure Desktop, 3.1.1.45

Vulnerable Configurations

Part Description Count
Application
Cisco
7

References