Unscored severity · published Aug 23, 2006
CVE-2006-4316
SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action…
–
CVSS
0.3%
EPSS
No
On KEV
Description
SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action is selected from the Management server GUI, which causes the agent to locate the pathname of the user's program and restart it with root privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Tectia Manager · Ssh
1.2; 1.3; 1.4; 2.0; 2.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4316
Vendor Advisory
http://secunia.com/advisories/21559
securitytracker.com
http://securitytracker.com/id?1016744
www.osvdb.org
http://www.osvdb.org/28159
www.securityfocus.com
http://www.securityfocus.com/bid/19677
Patch
http://www.ssh.com/company/news/2006/english/security/article/776/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/28561
More from Tectia Manager
–
CVE-2006-5484
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before…
–
CVE-2006-4315
Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and…