CVE-2006-4430
Estado: ModificadaMedia (5)—
The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.95%
- Percentil entre todas las CVEs puntuadas: 80
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-Other
Referencias
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html
- http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html
- http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html
- http://www.securityfocus.com/archive/1/408603/30/0/threaded
- http://www.securityfocus.com/archive/1/444424/100/0/threaded
- http://www.securityfocus.com/archive/1/444501/100/0/threaded
- http://www.securityfocus.com/archive/1/444737/100/0/threaded
- http://www.securityfocus.com/bid/19726
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html
- http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html
- http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html
- http://www.securityfocus.com/archive/1/408603/30/0/threaded
- http://www.securityfocus.com/archive/1/444424/100/0/threaded
- http://www.securityfocus.com/archive/1/444501/100/0/threaded
- http://www.securityfocus.com/archive/1/444737/100/0/threaded
- http://www.securityfocus.com/bid/19726
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-4430",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-08-29T00:04:00.000",
"references": [
{
"url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/408603/30/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/444424/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/444501/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/444737/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/19726",
"source": "cve@mitre.org"
},
{
"url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2005/08/msg00200.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/ps6128/products_security_notice09186a00804fa82b.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/408603/30/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/444424/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/444501/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/444737/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/19726",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms."
},
{
"lang": "es",
"value": "The Cisco Network Admission Control (NAC) 3.6.4.1 y anteriores permite a un atacante remoto prevenir la instalación de Cisco Clean Access (CCA) Agent y evitar los mecanismos de protección locales y remotos a través de la modficación de (1) la cabecera HTTP User-Agent o (2) el comportamiento de la pila TCP/IP. NOTA:el vendedor ha discutido la severidad de este asunto, indicando que los usuarios no pueden puentear los mecanismos de autentificación."
}
],
"lastModified": "2026-06-16T22:29:05.050",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ABB4C62-1CF7-4280-B084-2C7EB3C7198C",
"versionEndIncluding": "3.6.4.1"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D17AF7C3-3453-4343-AC57-B3BAACAD36E8"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D20F5D1-C28A-4D0E-B4BA-3F8A9B05933E"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FA3ABF2-F8D7-4D46-8862-072AD105AE5B"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28B34BF7-B96E-4C6A-B6BD-803680629300"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "280C9607-98C6-44CE-9017-43592EC9D013"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F972C202-DEEB-49AD-BBE7-442CA0E975E1"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "028ABC18-8944-474C-8482-2DC4F0E0B51B"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD764CC4-F985-4A2F-B744-0B07BE59534F"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B450984-DF81-46FE-A3E2-16323D1E55A2"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6133BA76-655F-4023-A5C5-31919D3C45E4"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A5D9FFC-728E-4E2A-9787-0748D0C88433"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8559F336-5A94-43ED-BF2E-0126038DA3C6"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7FE412A-DB93-41FC-85B3-38E46913BEB3"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63702A32-F7D3-46FF-B7B2-A845081D3AFE"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF86C8A2-154B-49B3-B263-41826DC196BF"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CC77562-5C30-4DA3-AFCD-7CD63D85E298"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9CD71A6-724B-42C1-BBBD-456F74393909"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5\\(9\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7EDB2AB-B6EA-4327-A969-88BB822B3896"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6828C91-18F9-4E36-B496-56E559180480"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2251B20D-F0AA-4FCA-8B62-B3EED16726E3"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D400E92-D0E4-43C2-8ECF-84352B5B2608"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A59115E7-A5AB-4468-BE51-AB6E8D188B07"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFE9D413-8078-4618-B4A6-4D774D30930F"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D89BCC4B-14A8-459F-94D9-70DDB6C205F4"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:3.6.4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55E40D45-E092-4D75-BE3C-64B7AB7A1018"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}