CVE-2006-4901 : Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

Published 2006-09-22 22:07:00

Updated 2021-04-09 16:21:31

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-4901

Broadcom » Etrust Security Command Center » Version: 8
cpe:2.3:a:broadcom:etrust_security_command_center:8:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Security Command Center » Version: 8 Update SP1 CR1 Edition
cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr1:*:*:*:*:*
Matching versions
Broadcom » Etrust Security Command Center » Version: 1.0
cpe:2.3:a:broadcom:etrust_security_command_center:1.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Security Command Center » Version: 8 Update SP1 CR2 Edition
cpe:2.3:a:broadcom:etrust_security_command_center:8:sp1:cr2:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Client » Version: 1.5 Update SP2
cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp2:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Client » Version: 1.5 Update SP3
cpe:2.3:a:broadcom:etrust_audit_client:1.5:sp3:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Client » Version: 8.0
cpe:2.3:a:broadcom:etrust_audit_client:8.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Policy Manager » Version: 1.5 Update SP3
cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp3:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Policy Manager » Version: 8.0
cpe:2.3:a:broadcom:etrust_audit_policy_manager:8.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Policy Manager » Version: 1.5 Update SP2
cpe:2.3:a:broadcom:etrust_audit_policy_manager:1.5:sp2:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Datatools » Version: 8.0
cpe:2.3:a:broadcom:etrust_audit_datatools:8.0:*:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Datatools » Version: 1.5 Update SP2
cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp2:*:*:*:*:*:*
Matching versions
Broadcom » Etrust Audit Datatools » Version: 1.5 Update SP3
cpe:2.3:a:broadcom:etrust_audit_datatools:1.5:sp3:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-4901

EPSS FAQ

2.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-4901

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:P	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-4901

http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9

Exploit;Patch;Vendor Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2006/3738

CVEs referencing this url
http://securitytracker.com/id?1016909
http://www.securityfocus.com/archive/1/446716/100/0/threaded

CVEs referencing this url
http://securitytracker.com/id?1016910

Patch

CVEs referencing this url
http://www.securityfocus.com/archive/1/446611/100/0/threaded

CVEs referencing this url
http://www.securityfocus.com/bid/20139

Exploit

CVEs referencing this url
http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt

Exploit;Patch;Vendor Advisory

CVEs referencing this url
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618

Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29107

Jump to

Vulnerability Details : CVE-2006-4901

Products affected by CVE-2006-4901

Exploit prediction scoring system (EPSS) score for CVE-2006-4901

CVSS scores for CVE-2006-4901

References for CVE-2006-4901