CVE-2006-0485
Summary
| CVE | CVE-2006-0485 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-02-01 02:02:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049. |
Risk And Classification
Primary CVSS: v2.0 4.6 from [email protected]
AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS: 0.001350000 probability, percentile 0.332500000 (date 2026-04-16)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios | 12.0t | All | All | All |
| Operating System | Cisco | Ios | 12.0xh | All | All | All |
| Operating System | Cisco | Ios | 12.0xk | All | All | All |
| Operating System | Cisco | Ios | 12.0xl | All | All | All |
| Operating System | Cisco | Ios | 12.0xn | All | All | All |
| Operating System | Cisco | Ios | 12.0xr | All | All | All |
| Operating System | Cisco | Ios | 12.1 | All | All | All |
| Operating System | Cisco | Ios | 12.1aa | All | All | All |
| Operating System | Cisco | Ios | 12.1e | All | All | All |
| Operating System | Cisco | Ios | 12.1ec | All | All | All |
| Operating System | Cisco | Ios | 12.1ez | All | All | All |
| Operating System | Cisco | Ios | 12.1ga | All | All | All |
| Operating System | Cisco | Ios | 12.1gb | All | All | All |
| Operating System | Cisco | Ios | 12.1t | All | All | All |
| Operating System | Cisco | Ios | 12.1xa | All | All | All |
| Operating System | Cisco | Ios | 12.1xe | All | All | All |
| Operating System | Cisco | Ios | 12.1xh | All | All | All |
| Operating System | Cisco | Ios | 12.1xi | All | All | All |
| Operating System | Cisco | Ios | 12.1xj | All | All | All |
| Operating System | Cisco | Ios | 12.1xl | All | All | All |
| Operating System | Cisco | Ios | 12.1xm | All | All | All |
| Operating System | Cisco | Ios | 12.1xp | All | All | All |
| Operating System | Cisco | Ios | 12.1xq | All | All | All |
| Operating System | Cisco | Ios | 12.1xs | All | All | All |
| Operating System | Cisco | Ios | 12.1xt | All | All | All |
| Operating System | Cisco | Ios | 12.1xu | All | All | All |
| Operating System | Cisco | Ios | 12.1xv | All | All | All |
| Operating System | Cisco | Ios | 12.1xw | All | All | All |
| Operating System | Cisco | Ios | 12.1xy | All | All | All |
| Operating System | Cisco | Ios | 12.1xz | All | All | All |
| Operating System | Cisco | Ios | 12.1ya | All | All | All |
| Operating System | Cisco | Ios | 12.1yb | All | All | All |
| Operating System | Cisco | Ios | 12.1yd | All | All | All |
| Operating System | Cisco | Ios | 12.1ye | All | All | All |
| Operating System | Cisco | Ios | 12.1yf | All | All | All |
| Operating System | Cisco | Ios | 12.1yh | All | All | All |
| Operating System | Cisco | Ios | 12.1yi | All | All | All |
| Operating System | Cisco | Ios | 12.2 | All | All | All |
| Operating System | Cisco | Ios | 12.2b | All | All | All |
| Operating System | Cisco | Ios | 12.2bw | All | All | All |
| Operating System | Cisco | Ios | 12.2by | All | All | All |
| Operating System | Cisco | Ios | 12.2dd | All | All | All |
| Operating System | Cisco | Ios | 12.2dx | All | All | All |
| Operating System | Cisco | Ios | 12.2mx | All | All | All |
| Operating System | Cisco | Ios | 12.2n | All | All | All |
| Operating System | Cisco | Ios | 12.2s | All | All | All |
| Operating System | Cisco | Ios | 12.2su | All | All | All |
| Operating System | Cisco | Ios | 12.2sw | All | All | All |
| Operating System | Cisco | Ios | 12.2sxb | All | All | All |
| Operating System | Cisco | Ios | 12.2sxd | All | All | All |
| Operating System | Cisco | Ios | 12.2sxe | All | All | All |
| Operating System | Cisco | Ios | 12.2sz | All | All | All |
| Operating System | Cisco | Ios | 12.2xa | All | All | All |
| Operating System | Cisco | Ios | 12.2xb | All | All | All |
| Operating System | Cisco | Ios | 12.2xc | All | All | All |
| Operating System | Cisco | Ios | 12.2xd | All | All | All |
| Operating System | Cisco | Ios | 12.2xg | All | All | All |
| Operating System | Cisco | Ios | 12.2xh | All | All | All |
| Operating System | Cisco | Ios | 12.2xj | All | All | All |
| Operating System | Cisco | Ios | 12.2xk | All | All | All |
| Operating System | Cisco | Ios | 12.2xl | All | All | All |
| Operating System | Cisco | Ios | 12.2xm | All | All | All |
| Operating System | Cisco | Ios | 12.2xq | All | All | All |
| Operating System | Cisco | Ios | 12.2xs | All | All | All |
| Operating System | Cisco | Ios | 12.2xt | All | All | All |
| Operating System | Cisco | Ios | 12.2xu | All | All | All |
| Operating System | Cisco | Ios | 12.2xv | All | All | All |
| Operating System | Cisco | Ios | 12.2xw | All | All | All |
| Operating System | Cisco | Ios | 12.2yb | All | All | All |
| Operating System | Cisco | Ios | 12.2yc | All | All | All |
| Operating System | Cisco | Ios | 12.2yd | All | All | All |
| Operating System | Cisco | Ios | 12.2ye | All | All | All |
| Operating System | Cisco | Ios | 12.2yh | All | All | All |
| Operating System | Cisco | Ios | 12.2yk | All | All | All |
| Operating System | Cisco | Ios | 12.2yl | All | All | All |
| Operating System | Cisco | Ios | 12.2ym | All | All | All |
| Operating System | Cisco | Ios | 12.2yn | All | All | All |
| Operating System | Cisco | Ios | 12.2yt | All | All | All |
| Operating System | Cisco | Ios | 12.2yu | All | All | All |
| Operating System | Cisco | Ios | 12.2yw | All | All | All |
| Operating System | Cisco | Ios | 12.2yx | All | All | All |
| Operating System | Cisco | Ios | 12.2yy | All | All | All |
| Operating System | Cisco | Ios | 12.2yz | All | All | All |
| Operating System | Cisco | Ios | 12.2zb | All | All | All |
| Operating System | Cisco | Ios | 12.2zc | All | All | All |
| Operating System | Cisco | Ios | 12.2zd | All | All | All |
| Operating System | Cisco | Ios | 12.2ze | All | All | All |
| Operating System | Cisco | Ios | 12.2zf | All | All | All |
| Operating System | Cisco | Ios | 12.2zh | All | All | All |
| Operating System | Cisco | Ios | 12.2zj | All | All | All |
| Operating System | Cisco | Ios | 12.2zl | All | All | All |
| Operating System | Cisco | Ios | 12.2zn | All | All | All |
| Operating System | Cisco | Ios | 12.2zp | All | All | All |
| Operating System | Cisco | Ios | 12.3 | All | All | All |
| Operating System | Cisco | Ios | 12.3b | All | All | All |
| Operating System | Cisco | Ios | 12.3t | All | All | All |
| Operating System | Cisco | Ios | 12.3xa | All | All | All |
| Operating System | Cisco | Ios | 12.3xb | All | All | All |
| Operating System | Cisco | Ios | 12.3xd | All | All | All |
| Operating System | Cisco | Ios | 12.3xe | All | All | All |
| Operating System | Cisco | Ios | 12.3xf | All | All | All |
| Operating System | Cisco | Ios | 12.3xg | All | All | All |
| Operating System | Cisco | Ios | 12.3xh | All | All | All |
| Operating System | Cisco | Ios | 12.3xi | All | All | All |
| Operating System | Cisco | Ios | 12.3xj | All | All | All |
| Operating System | Cisco | Ios | 12.3xk | All | All | All |
| Operating System | Cisco | Ios | 12.3xm | All | All | All |
| Operating System | Cisco | Ios | 12.3xq | All | All | All |
| Operating System | Cisco | Ios | 12.3xr | All | All | All |
| Operating System | Cisco | Ios | 12.3xw | All | All | All |
| Operating System | Cisco | Ios | 12.3xy | All | All | All |
| Operating System | Cisco | Ios | 12.3ya | All | All | All |
| Operating System | Cisco | Ios | 12.3yb | All | All | All |
| Operating System | Cisco | Ios | 12.3yf | All | All | All |
| Operating System | Cisco | Ios | 12.3yg | All | All | All |
| Operating System | Cisco | Ios | 12.3yh | All | All | All |
| Operating System | Cisco | Ios | 12.3yi | All | All | All |
| Operating System | Cisco | Ios | 12.3yj | All | All | All |
| Operating System | Cisco | Ios | 12.3yk | All | All | All |
| Operating System | Cisco | Ios | 12.3ym | All | All | All |
| Operating System | Cisco | Ios | 12.3yq | All | All | All |
| Operating System | Cisco | Ios | 12.3ys | All | All | All |
| Operating System | Cisco | Ios | 12.3yt | All | All | All |
| Operating System | Cisco | Ios | 12.3yu | All | All | All |
| Operating System | Cisco | Ios | 12.3yx | All | All | All |
| Operating System | Cisco | Ios | 12.3\(11\)yk2 | All | All | All |
| Operating System | Cisco | Ios | 12.3\(11\)yl | All | All | All |
| Operating System | Cisco | Ios | 12.4 | All | All | All |
| Operating System | Cisco | Ios | 12.4mr | All | All | All |
| Operating System | Cisco | Ios | 12.4t | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| SecurityTracker.com Archives - Cisco IOS AAA Command Authorization Feature May Let Remote Authenticated Users Gain Elevated Privileges | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| Cisco IOS TCLSH AAA Command Authorization Bypass Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Cisco - Networking, Cloud, and Cybersecurity Solutions | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | Vendor Advisory |
| www.osvdb.org/34892 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| Cisco IOS AAA Command Authentication Bypass Vulnerability - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.