CVE:CVE-2006-1672
CNNVD:CNNVD-200604-095
Cisco光纤网络系统(ONS)15000系列节点的Cisco传输控制器(CTC)的安装，会加入一个带通配符的Java策略文件，这个java文件对于任意包含"fs/LAUNCHER.jar"的Http URL拥有java.secrity.AllPermission的权限，那将允许远程攻击者在CTC工作站执行任意代码，这又称bug ID CSCea25049.
solution:Upgrade cisco transport_controller to a higher version than 4.0.x,and avoid the version 4.0.x; Upgrade cisco optical_networking_systems_software to a higher version than 1.0,1.1,1.1(0,1.1(1,1.3(0,3.0,3.1.0,3.2,3.3.0,3.4.0,4.0(1,4.0(2,4.0.0,4.1(0,4.1(1,4.1(2,4.1(3,4.1.4,4.6(0,4.6(1,and avoid the version 1.0,1.1,1.1(0),1.1(1),1.3(0),3.0,3.1.0,3.2,3.3.0,3.4.0,4.0(1),4.0(2),4.0.0,4.1(0),4.1(1),4.1(2),4.1(3),4.1.4,4.6(0),4.6(1); Upgrade cisco ons_15310-cl_series to a higher version than 0,and avoid the version 0; Upgrade cisco ons_15600 to a higher version than 0,and avoid the version 0; Upgrade cisco ons_15454_mspp to a higher version than *