CVE-2006-0561

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key.

• http://securitytracker.com/id?1016042Patch
• http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtmlPatch
• http://www.osvdb.org/25892
• http://www.securityfocus.com/archive/1/433286/100/0/threadedVendor Advisory
• http://www.securityfocus.com/archive/1/433301/100/0/threadedPatch, Vendor Advisory
• http://www.securityfocus.com/bid/16743Patch
• http://www.symantec.com/enterprise/research/SYMSA-2006-003.txtPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1741
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26307
• http://securitytracker.com/id?1016042Patch
• http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtmlPatch
• http://www.osvdb.org/25892
• http://www.securityfocus.com/archive/1/433286/100/0/threadedVendor Advisory
• http://www.securityfocus.com/archive/1/433301/100/0/threadedPatch, Vendor Advisory
• http://www.securityfocus.com/bid/16743Patch
• http://www.symantec.com/enterprise/research/SYMSA-2006-003.txtPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1741
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26307

Published

May 10, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0555The Linux Kernel before 2.6.15.5 allows local users to cause…
• CVE-2006-0556Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-0557sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier …
• CVE-2006-0558perfmon (perfmon.c) in Linux kernel on IA64 architectures al…
• CVE-2006-0559Format string vulnerability in the SMTP server for McAfee We…
• CVE-2006-0560Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-0562Cross-site scripting (XSS) vulnerability in problem.php in P…
• CVE-2006-0563SQL injection vulnerability in exec.php in PluggedOut Blog 1…
• CVE-2006-0564Stack-based buffer overflow in Microsoft HTML Help Workshop …
• CVE-2006-0565PHP remote file include vulnerability in inc/backend_setting…
• CVE-2006-0566The LDAP component in CommuniGate Pro Core Server 5.0.7 allo…
• CVE-2006-0567Directory traversal vulnerability in Files Xaraya module bef…