Lucene search

[email protected]CVE-2005-1058

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1058

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cisco

ios

vulnerability

cve-2005-1058

isakmp

xauth

authentication

remote attackers

phase 1

phase 2

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

JSON

Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.

Affected configurations

NVD

Node

ciscoiosMatch12.2t

ciscoiosMatch12.3

ciscoiosMatch12.3t

CPENameOperatorVersion
cisco:ioscisco ioseq12.2t
cisco:ioscisco ioseq12.3
cisco:ioscisco ioseq12.3t

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.2t
cisco:ios	cisco ios	eq	12.3
cisco:ios	cisco ios	eq	12.3t

References

www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

JSON

Related for CVE-2005-1058

nessus2 cvelist1 cert1 nvd1 cisco1