CVEvulnerability

CVE-2006-0485

4.6 MEDIUM Published 2006-02-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-02-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.

Affected configurations

• cisco ios 12.0t • cisco ios 12.0xh • cisco ios 12.0xk • cisco ios 12.0xl • cisco ios 12.0xn • cisco ios 12.0xr • cisco ios 12.1 • cisco ios 12.1aa • cisco ios 12.1e • cisco ios 12.1ec • cisco ios 12.1ez • cisco ios 12.1ga • cisco ios 12.1gb • cisco ios 12.1t • cisco ios 12.1xa • cisco ios 12.1xe • cisco ios 12.1xh • cisco ios 12.1xi • cisco ios 12.1xj • cisco ios 12.1xl • cisco ios 12.1xm • cisco ios 12.1xp • cisco ios 12.1xq • cisco ios 12.1xs • cisco ios 12.1xt • cisco ios 12.1xu • cisco ios 12.1xv • cisco ios 12.1xw • cisco ios 12.1xy • cisco ios 12.1xz • cisco ios 12.1ya • cisco ios 12.1yb • cisco ios 12.1yd • cisco ios 12.1ye • cisco ios 12.1yf • cisco ios 12.1yh • cisco ios 12.1yi • cisco ios 12.2 • cisco ios 12.2b • cisco ios 12.2bw • cisco ios 12.2by • cisco ios 12.2dd • cisco ios 12.2dx • cisco ios 12.2mx • cisco ios 12.2n • cisco ios 12.2s • cisco ios 12.2su • cisco ios 12.2sw • cisco ios 12.2sxb • cisco ios 12.2sxd • cisco ios 12.2sxe • cisco ios 12.2sz • cisco ios 12.2xa • cisco ios 12.2xb • cisco ios 12.2xc • cisco ios 12.2xd • cisco ios 12.2xg • cisco ios 12.2xh • cisco ios 12.2xj • cisco ios 12.2xk … and 70 more

References