← back
CVE-2006-4313

CVE-2006-4313

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 12%
from disclosure to weapon0 days
Published on NVDAug 23
metasploitAug 23
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.
Affected products
n/a · n/a
References
http://secunia.com/advisories/21617http://securitytracker.com/id?1016737https://exchange.xforce.ibmcloud.com/vulnerabilities/28539http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtmlhttp://www.osvdb.org/28138http://www.osvdb.org/28139http://www.securityfocus.com/bid/19680http://www.vupen.com/english/advisories/2006/3368