VulnerabilityModified
CVE-2006-3593
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.
MEDIUM 4.0EPSS 1.01%
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unified callmanager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21030Vendor Advisory
- http://securitytracker.com/id?1016475
- http://www.cisco.com/en/US/products/products_security_advisory09186a00806e0b9f.shtml
- http://www.osvdb.org/27161
- http://www.securityfocus.com/bid/18952
- http://www.vupen.com/english/advisories/2006/2774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27690
- http://secunia.com/advisories/21030Vendor Advisory
- http://securitytracker.com/id?1016475
- http://www.cisco.com/en/US/products/products_security_advisory09186a00806e0b9f.shtml
- http://www.osvdb.org/27161
- http://www.securityfocus.com/bid/18952
- http://www.vupen.com/english/advisories/2006/2774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27690
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.