CVE-2006-4901
Estado: ModificadaMedia (6.4)—
Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
- Puntuación base: 6.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 11%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/22023
- http://secunia.com/advisories/22073
- http://securitytracker.com/id?1016909
- http://securitytracker.com/id?1016910
- http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
- http://www.osvdb.org/29011
- http://www.securityfocus.com/archive/1/446611/100/0/threaded
- http://www.securityfocus.com/archive/1/446716/100/0/threaded
- http://www.securityfocus.com/bid/20139
- http://www.vupen.com/english/advisories/2006/3738
- http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29107
- http://secunia.com/advisories/22023
- http://secunia.com/advisories/22073
- http://securitytracker.com/id?1016909
- http://securitytracker.com/id?1016910
- http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
- http://www.osvdb.org/29011
- http://www.securityfocus.com/archive/1/446611/100/0/threaded
- http://www.securityfocus.com/archive/1/446716/100/0/threaded
- http://www.securityfocus.com/bid/20139
- http://www.vupen.com/english/advisories/2006/3738
- http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29107
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-4901",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-09-22T22:07:00.000",
"references": [
{
"url": "http://secunia.com/advisories/22023",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/22073",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016909",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016910",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/29011",
"tags": [
"Exploit",
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/20139",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3738",
"source": "cve@mitre.org"
},
{
"url": "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29107",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/22023",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/22073",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016909",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016910",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/29011",
"tags": [
"Exploit",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/446611/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/446716/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/20139",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3738",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29107",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments."
},
{
"lang": "es",
"value": "Computer Associates (CA) eTrust Security Command Center 1.0 y r8 hasta SP1 CR2, y eTrust Audit 1.5 y r8, permite a un atacante remoto suplantar alertas y guíar ataques de repetición a través de la invocación de eTSAPISend.exe con los argumentos deseados."
}
],
"lastModified": "2026-06-16T22:30:00.073",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AADF88C7-8F85-4FA9-82DD-4896404A92C3"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "315F1B77-C655-4131-87DA-EBC171FEDEC3"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_client:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "555B7B8E-8047-4890-810D-DECDFC730BC8"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "209DFBD5-5E38-42A1-945D-4879C5FAFDE3"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DDC23AF-EEC3-4DF9-8EC6-A7B094224EDF"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_datatools:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB1A4631-D677-468C-9A31-DD5C4BBDDF28"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25AEF3E6-1113-41A5-9357-96F8374C4A7B"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2749B665-DA7F-4F6A-9F52-3A4D0A10BAFD"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_audit_policy_manager:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6AD8658-B2BB-4E60-8EAA-7B491F2D6027"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_security_command_center:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C363D8B-1022-4C2A-BEDE-34EAB274D9D7"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB8C8321-1BE6-476D-910E-6BBDBE683309"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "054689EB-D43E-4C0F-B504-FE615607332A"
},
{
"criteria": "cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40DC453F-12F6-4D51-ADFF-71D2628F3CD8"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}