ID CVE-2006-5807
Summary Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:secure_desktop:-:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:-:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.0_base:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.0_base:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.1.0.31:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.1.0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 20-07-2017 - 01:33)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 20964
cisco 20061108 Multiple Vulnerabilities in Cisco Secure Desktop
osvdb 30307
sectrack 1017195
secunia 22747
vupen ADV-2006-4409
xf cisco-csd-application-security-bypass(30130)
Last major update 20-07-2017 - 01:33
Published 08-11-2006 - 22:07
Last modified 20-07-2017 - 01:33
Back to Top