CVE-2006-0486
Last modified
CVE-2006-0486 is a vulnerability of currently unknown severity. Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 12.2\(25\)s |
| Cisco | Ios | 12.3t |
| Cisco | Ios | 12.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-0486?
How severe is CVE-2006-0486?
How do I fix CVE-2006-0486?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-0480Cross-site scripting (XSS) vulnerability in the Articles mod…
- CVE-2006-0481Heap-based buffer overflow in the alpha strip capability in …
- CVE-2006-0482Linux kernel 2.6.15.1 and earlier, when running on SPARC arc…
- CVE-2006-0483Cisco VPN 3000 series concentrators running software 4.7.0 t…
- CVE-2006-0484Directory traversal vulnerability in Vis.pl, as part of the …
- CVE-2006-0485The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.…
- CVE-2006-0487Multiple unspecified vulnerabilities in Tumbleweed MailGate …
- CVE-2006-0488The VDM (Virtual DOS Machine) emulation environment for MS-D…
- CVE-2006-0489Buffer overflow in the font command of mIRC, probably 6.16, …
- CVE-2006-0490SQL injection vulnerability in login.asp in ASPThai.Net ASPT…
- CVE-2006-0491SQL injection vulnerability in SZUserMgnt.class.php in SZUse…
- CVE-2006-0492Multiple SQL injection vulnerabilities in Calendarix allow r…
Are you affected by CVE-2006-0486?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST