CVE-2006-5660

HIGH 7.5CVE-2006-5660 · Published 03/11/2006 · updated 16/06/2026

In short

CVE-2006-5660 is a HIGH (CVSS 7.5) vulnerability affecting security agent management center (cisco).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
security agent management center cisco	`= 5.1`	No fix yet

Description

Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote attackers to bypass authentication requirements via an empty password when using an external LDAP server.

References

secunia.com/advisories/22684
securitytracker.com/id
cisco.com/en/US/products/products_security_advisory09186a00807726f7.shtml · Patch
kb.cert.org/vuls/id/778648 · US Government Resource
osvdb.org/30169
securityfocus.com/bid/20852 · Patch
vupen.com/english/advisories/2006/4308
exchange.xforce.ibmcloud.com/vulnerabilities/29955

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free