CVE-2006-1672
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS)...
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
Exploit likelihood
What each source reports
NVD Score used
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
- Record
CVE-2006-1672- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
- Record
CVE-2006-1672- Updated
- 2026-11-02
EUVDEUVD-2006-1673 No score
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
- Record
EUVD-2006-1673- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-34wc-p67w-xmgr No score
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS)...
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
- Record
GHSA-34wc-p67w-xmgr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1672 is a high vulnerability (CVSS 7.5) in Cisco Transport Controller, published April 7, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.12%, the 90th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/1256
osvdb.org/24438
secunia.com/advisories/19553
exchange.xforce.ibmcloud.com/vulnerabilities/25647
securityfocus.com/bid/17384
securitytracker.com/id?1015871
cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
nvd.nist.gov/vuln/detail/CVE-2006-1672
github.com/advisories/GHSA-34wc-p67w-xmgr