CVE-2006-5553
published 2006-10-26CVE-2006-5553: Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS)…
PriorityP429high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.06%
86.1th percentile
Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain options.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | security_agent | — | — |
| cisco | security_agent | — | — |
| cisco | security_agent | — | — |
| cisco | security_agent | — | — |
| cisco | security_agent_for_linux_port_scan | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_presence_server | — | — |
| cisco | unified_presence_server | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco2.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Security Agent for Linux Port Scan Denial of Service
vendor_cisco·2006-10-25·CVSS 2.3
CVE-2006-5553 [LOW] CWE-399 Cisco Security Agent for Linux Port Scan Denial of Service
Cisco Security Agent for Linux Port Scan Denial of Service
Cisco Security Agent (CSA) for Linux contains a denial of service
vulnerability involving port scans. By performing a port scan against a system
running a vulnerable version of CSA, it is possible to cause the system to
become unresponsive. Cisco Unified CallManager (CUCM) and Cisco Unified
Presence Server (CUPS) ship with a vulnerable CSA version.
There are workarounds for this vulnerability. Cisco has made free
software available to address this vulnerability for affected customers.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20061025-csa.
Cisco
Cisco Security Agent for Linux Port Scan Denial of Service
vendor_cisco
CVE-2006-5553 Cisco Security Agent for Linux Port Scan Denial of Service
CVE-2006-5553: Cisco Security Agent for Linux Port Scan Denial of Service
Cisco Security Agent (CSA) for Linux contains a denial of service vulnerability involving port scans. By performing a port scan against a system running a vulnerable version of CSA, it is possible to cause the system to become unresponsive. Cisco Unified CallManager (CUCM) and Cisco Unified Presence Server (CUPS) ship with a vulnerable CSA version. There are
CWE: CWE-399, CWE-399
Bug IDs: CSCse98684, CSCse97601, CSCsg40052
GHSA
GHSA-m8qx-h53w-5fh9: Cisco Security Agent (CSA) for Linux 4
ghsa_unreviewed·2022-05-01
CVE-2006-5553 [HIGH] GHSA-m8qx-h53w-5fh9: Cisco Security Agent (CSA) for Linux 4
Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain options.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/22574http://securitytracker.com/id?1017118http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtmlhttp://www.osvdb.org/30055http://www.securityfocus.com/bid/20737http://www.vupen.com/english/advisories/2006/4198https://exchange.xforce.ibmcloud.com/vulnerabilities/29829http://secunia.com/advisories/22574http://securitytracker.com/id?1017118http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtmlhttp://www.osvdb.org/30055http://www.securityfocus.com/bid/20737http://www.vupen.com/english/advisories/2006/4198https://exchange.xforce.ibmcloud.com/vulnerabilities/29829
2006-10-26
Published