CVE-2006-4313

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.

Affected Products (11)

cisco · vpn_3000_concentrator_series_softwarevulnerable

cisco · vpn_3000_concentrator_series_software

References (16)

http://secunia.com/advisories/21617

http://securitytracker.com/id?1016737

http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml

Patch

http://www.osvdb.org/28138

http://www.osvdb.org/28139

http://www.securityfocus.com/bid/19680

http://www.vupen.com/english/advisories/2006/3368

https://exchange.xforce.ibmcloud.com/vulnerabilities/28539

http://secunia.com/advisories/21617

http://securitytracker.com/id?1016737

http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml

Patch