CVE-2006-5660

Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server.

• http://secunia.com/advisories/22684
• http://securitytracker.com/id?1017148
• http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/778648US Government Resource
• http://www.osvdb.org/30169
• http://www.securityfocus.com/bid/20852Patch
• http://www.vupen.com/english/advisories/2006/4308
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29955
• http://secunia.com/advisories/22684
• http://securitytracker.com/id?1017148
• http://www.cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/778648US Government Resource
• http://www.osvdb.org/30169
• http://www.securityfocus.com/bid/20852Patch
• http://www.vupen.com/english/advisories/2006/4308
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29955

Published

Nov 3, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5654Unspecified vulnerability in the Network Security Services (…
• CVE-2006-5655SQL injection vulnerability in index.php in OpenDocMan 1.2p3…
• CVE-2006-5656Memory leak in the push_align function in src/util.c in Vili…
• CVE-2006-5657Multiple off-by-one errors in src/text.c in Vilistextum befo…
• CVE-2006-5658BlooMooWeb ActiveX control (AidemATL.dll) allows remote atta…
• CVE-2006-5659PAM_extern before 0.2 sends a password as a command line arg…
• CVE-2006-5661Cross-site scripting (XSS) vulnerability in nquser.php in VI…
• CVE-2006-5662SQL injection vulnerability in easy notesManager (eNM) 0.0.1…
• CVE-2006-5663IBM Informix Dynamic Server 10.00, Informix Client Software …
• CVE-2006-5664The installation script in IBM Informix Dynamic Server 10.00…
• CVE-2006-5665PHP remote file inclusion vulnerability in admin/modules_dat…
• CVE-2006-5666SQL injection vulnerability in includes/menu.inc.php in E-An…