Lucene search
MitreCVE-2006-4981HistorySep 26, 2006 - 2:07 a.m.
CVE-2006-4981
2006-09-2602:07:00
mitre
web.nvd.nist.gov
27
symantec
sygate
nac
bypass
vulnerability
forged mac addresses
security
cve-2006-4981
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
14.1%
Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that (1) permits all non-Windows devices or (2) whitelists certain sets of Organizationally Unique Identifiers (OUIs).
Affected configurations
Node
symantecsygate_network_access_control
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | sygate_network_access_control | * | cpe:2.3:a:symantec:sygate_network_access_control:*:*:*:*:*:*:*:* |
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
14.1%
Related for CVE-2006-4981