← Vulnerability feed

Vulnerability record · CVE-2006-4901 · published 22 September 2006

CVE-2006-4901: Broadcom etrust audit client vulnerability

Broadcom · Etrust Audit Client

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

6.4 CVSS 2.0 Medium EPSS 11% · top 4.3%
6.4CVSS 2.0 base score
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
26References, 10 tagged exploit
16 Jun 2026Last modified by NVD

Description

Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.

AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/22023 ExploitPatchVendor Advisory
http://secunia.com/advisories/22073 Vendor Advisory
http://securitytracker.com/id?1016909
http://securitytracker.com/id?1016910 Patch
http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt ExploitPatchVendor Advisory
http://www.osvdb.org/29011 ExploitPatch
http://www.securityfocus.com/archive/1/446611/100/0/threaded
http://www.securityfocus.com/archive/1/446716/100/0/threaded
http://www.securityfocus.com/bid/20139 Exploit
http://www.vupen.com/english/advisories/2006/3738
http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 ExploitPatchVendor Advisory
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29107
http://secunia.com/advisories/22023 ExploitPatchVendor Advisory
http://secunia.com/advisories/22073 Vendor Advisory
http://securitytracker.com/id?1016909
http://securitytracker.com/id?1016910 Patch
http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt ExploitPatchVendor Advisory
http://www.osvdb.org/29011 ExploitPatch
http://www.securityfocus.com/archive/1/446611/100/0/threaded
http://www.securityfocus.com/archive/1/446716/100/0/threaded
http://www.securityfocus.com/bid/20139 Exploit
http://www.vupen.com/english/advisories/2006/3738
http://www3.ca.com/securityadvisor/blogs/posting.aspx?id=90744&pid=93243&date=2006/9 ExploitPatchVendor Advisory
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34618 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29107

Track CVE-2006-4901 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.5CVE-2006-4900Broadcom etrust security command center vulnerabilityDirectory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated us…EPSS 8.3%5.0CVE-2006-4899Broadcom etrust security command center vulnerabilityThe ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote at…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2006-4901), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.