CVE-2006-4901

medium · 6.4

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

6.4

CVSS

11.0%

EPSS (exploit prob.)

96th

EPSS percentile

2006-09-22

Published

AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected products

Vendor	Product	Affected versions
broadcom	etrust_audit_client	1.5
broadcom	etrust_audit_client	1.5
broadcom	etrust_audit_client	8.0
broadcom	etrust_audit_datatools	1.5
broadcom	etrust_audit_datatools	1.5
broadcom	etrust_audit_datatools	8.0
broadcom	etrust_audit_policy_manager	1.5
broadcom	etrust_audit_policy_manager	1.5
broadcom	etrust_audit_policy_manager	8.0
broadcom	etrust_security_command_center	1.0
broadcom	etrust_security_command_center	8
broadcom	etrust_security_command_center	8
broadcom	etrust_security_command_center	8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-4901