Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
BID:19680
CVE-2006-4313 |Info
Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
| Bugtraq ID: | 19680 |
| Class: | Access Validation Error |
| CVE: |
CVE-2006-4313 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 23 2006 12:00AM |
| Updated: | Jul 08 2009 08:06PM |
| Credit: | The vendor disclosed this vulnerability. |
| Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.2 F Cisco VPN 3080 Concentrator 4.7.2 A Cisco VPN 3080 Concentrator 4.7.2 A Cisco VPN 3080 Concentrator 4.7.1 F Cisco VPN 3080 Concentrator 4.7.1 Cisco VPN 3080 Concentrator 4.7 Cisco VPN 3080 Concentrator 4.1.7 L Cisco VPN 3080 Concentrator 4.7 REL Cisco VPN 3080 Concentrator Cisco VPN 3060 Concentrator 4.7.2 A Cisco VPN 3060 Concentrator 4.7.2 A Cisco VPN 3060 Concentrator 4.7.2 Cisco VPN 3060 Concentrator 4.7.1 F Cisco VPN 3060 Concentrator 4.7.1 Cisco VPN 3060 Concentrator 4.7 Cisco VPN 3060 Concentrator 3.5.2 Cisco VPN 3060 Concentrator 4.7 REL Cisco VPN 3060 Concentrator Cisco VPN 3030 Concentrator 4.7.2 F Cisco VPN 3030 Concentrator 4.7.2 A Cisco VPN 3030 Concentrator 4.7.2 Cisco VPN 3030 Concentrator 4.7.1 F Cisco VPN 3030 Concentrator 4.7.1 Cisco VPN 3030 Concentrator 4.7 Cisco VPN 3030 Concentrator 4.1.7 L Cisco VPN 3030 Concentrator 4.0.2 Cisco VPN 3030 Concentrator 4.0.2 Cisco VPN 3030 Concentrator 4.7 REL Cisco VPN 3030 Concentrator Cisco VPN 3020 Concentrator 4.7.2 F Cisco VPN 3020 Concentrator 4.7.2 A Cisco VPN 3020 Concentrator 4.7.2 Cisco VPN 3020 Concentrator 4.7.1 F Cisco VPN 3020 Concentrator 4.7.1 Cisco VPN 3020 Concentrator 4.7 Cisco VPN 3020 Concentrator 4.1.7 L Cisco VPN 3020 Concentrator 4.7 REL Cisco VPN 3020 Concentrator Cisco VPN 3015 Concentrator 4.7.2 F Cisco VPN 3015 Concentrator 4.7.2 A Cisco VPN 3015 Concentrator 4.7.2 Cisco VPN 3015 Concentrator 4.7.1 F Cisco VPN 3015 Concentrator 4.7.1 Cisco VPN 3015 Concentrator 4.7 Cisco VPN 3015 Concentrator 4.1.7 L Cisco VPN 3015 Concentrator 4.7 REL Cisco VPN 3015 Concentrator Cisco VPN 3005 Concentrator 4.7.2 F Cisco VPN 3005 Concentrator 4.7.2 A Cisco VPN 3005 Concentrator 4.7.2 Cisco VPN 3005 Concentrator 4.7.1 F Cisco VPN 3005 Concentrator 4.7.1 Cisco VPN 3005 Concentrator 4.7 Cisco VPN 3005 Concentrator 4.1.7 L Cisco VPN 3005 Concentrator 4.0.1 Cisco VPN 3005 Concentrator 4.0 Cisco VPN 3005 Concentrator 3.6.7 F Cisco VPN 3005 Concentrator 3.6.7 D Cisco VPN 3005 Concentrator 3.6.7 C Cisco VPN 3005 Concentrator 3.6.7 B Cisco VPN 3005 Concentrator 3.6.7 A Cisco VPN 3005 Concentrator 3.6.7 Cisco VPN 3005 Concentrator 3.6.5 Cisco VPN 3005 Concentrator 3.6.3 Cisco VPN 3005 Concentrator 4.7 REL Cisco VPN 3001 Concentrator 0 Cisco VPN 3000 Concentrator 4.7.1 F Cisco VPN 3000 Concentrator 4.7.1 Cisco VPN 3000 Concentrator 4.7 Cisco VPN 3000 Concentrator 4.1.5 .B Cisco VPN 3000 Concentrator 4.1 .x Cisco VPN 3000 Concentrator 4.0.5 .B Cisco VPN 3000 Concentrator 4.0.1 Cisco VPN 3000 Concentrator 4.0 .x Cisco VPN 3000 Concentrator 4.0 Cisco VPN 3000 Concentrator 3.6.7 D Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 Cisco VPN 3000 Concentrator 4.1.7.B Cisco VPN 3000 Concentrator 4.1.7.A |
| Not Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.2 G Cisco VPN 3080 Concentrator 4.1.7 M Cisco VPN 3060 Concentrator 4.7.2 G Cisco VPN 3060 Concentrator 4.1.7 M Cisco VPN 3030 Concentrator 4.7.2 G Cisco VPN 3030 Concentrator 4.1.7 M Cisco VPN 3020 Concentrator 4.7.2 G Cisco VPN 3020 Concentrator 4.1.7 M Cisco VPN 3015 Concentrator 4.7.2 G Cisco VPN 3015 Concentrator 4.1.7 M Cisco VPN 3005 Concentrator 4.7.2 G Cisco VPN 3005 Concentrator 4.1.7 M Cisco VPN 3000 Concentrator 4.7.2 G Cisco VPN 3000 Concentrator 4.1.7 M |
Discussion
Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
The Cisco VPN 3000 series concentrators are prone to a vulnerability that allows attackers to access arbitrary files.
An attacker can exploit this issue to rename and delete arbitrary files on the affected device in the context of the FTP server process. This may facilitate further attacks.
The Cisco VPN 3000 series concentrators are prone to a vulnerability that allows attackers to access arbitrary files.
An attacker can exploit this issue to rename and delete arbitrary files on the affected device in the context of the FTP server process. This may facilitate further attacks.
Exploit / POC
Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
Attackers can use an FTP client application to exploit this issue.
The following exploits are available:
Attackers can use an FTP client application to exploit this issue.
The following exploits are available:
Solution / Fix
Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
Solution:
The vendor has released updates. Please see the referenced advisory for details.
Solution:
The vendor has released updates. Please see the referenced advisory for details.
References
Cisco VPN 3000 Concentrator FTP Arbitrary File Access Vulnerability
References:
References: