Lucene search
HistoryJul 05, 2005 - 4:00 a.m.
CVE-2005-2105
cisco
ios
12.2t
12.4
radius
authentication
bypass
aaa
cve-2005-2105
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.
Affected configurations
Node
ciscoiosMatch12.2\(2\)xr
ORciscoiosMatch12.2\(4\)xr
ORciscoiosMatch12.2t
ORciscoiosMatch12.2xb
ORciscoiosMatch12.2xc
ORciscoiosMatch12.2xd
ORciscoiosMatch12.2xe
ORciscoiosMatch12.2xf
ORciscoiosMatch12.2xg
ORciscoiosMatch12.2xh
ORciscoiosMatch12.2xi
ORciscoiosMatch12.2xj
ORciscoiosMatch12.2xk
ORciscoiosMatch12.2xl
ORciscoiosMatch12.2xm
ORciscoiosMatch12.2xq
ORciscoiosMatch12.2xr
ORciscoiosMatch12.2xt
ORciscoiosMatch12.2xw
ORciscoiosMatch12.2ya
ORciscoiosMatch12.2yb
ORciscoiosMatch12.2yc
ORciscoiosMatch12.2yd
ORciscoiosMatch12.2yf
ORciscoiosMatch12.2yg
ORciscoiosMatch12.2yh
ORciscoiosMatch12.2yj
ORciscoiosMatch12.2yl
ORciscoiosMatch12.2ym
ORciscoiosMatch12.2yn
ORciscoiosMatch12.2yp
ORciscoiosMatch12.2yq
ORciscoiosMatch12.2yr
ORciscoiosMatch12.2yt
ORciscoiosMatch12.2yu
ORciscoiosMatch12.2yv
ORciscoiosMatch12.2yw
ORciscoiosMatch12.2yy
ORciscoiosMatch12.2zb
ORciscoiosMatch12.2zc
ORciscoiosMatch12.2zd
ORciscoiosMatch12.2ze
ORciscoiosMatch12.2zf
ORciscoiosMatch12.2zg
ORciscoiosMatch12.2zh
ORciscoiosMatch12.2zj
ORciscoiosMatch12.2zl
ORciscoiosMatch12.2zn
ORciscoiosMatch12.2zo
ORciscoiosMatch12.2zp
ORciscoiosMatch12.3b
ORciscoiosMatch12.3bc
ORciscoiosMatch12.3bw
ORciscoiosMatch12.3ja
ORciscoiosMatch12.3t
ORciscoiosMatch12.3xa
ORciscoiosMatch12.3xb
ORciscoiosMatch12.3xc
ORciscoiosMatch12.3xd
ORciscoiosMatch12.3xe
ORciscoiosMatch12.3xf
ORciscoiosMatch12.3xg
ORciscoiosMatch12.3xh
ORciscoiosMatch12.3xi
ORciscoiosMatch12.3xj
ORciscoiosMatch12.3xk
ORciscoiosMatch12.3xl
ORciscoiosMatch12.3xm
ORciscoiosMatch12.3xn
ORciscoiosMatch12.3xq
ORciscoiosMatch12.3xr
ORciscoiosMatch12.3xs
ORciscoiosMatch12.3xt
ORciscoiosMatch12.3xu
ORciscoiosMatch12.3xw
ORciscoiosMatch12.3xx
ORciscoiosMatch12.3xy
ORciscoiosMatch12.3ya
ORciscoiosMatch12.3yb
ORciscoiosMatch12.3yd
ORciscoiosMatch12.3yf
ORciscoiosMatch12.3yg
ORciscoiosMatch12.3yh
ORciscoiosMatch12.3yi
ORciscoiosMatch12.3yj
ORciscoiosMatch12.3yk
ORciscoiosMatch12.3yl
ORciscoiosMatch12.3yn
ORciscoiosMatch12.3yq
ORciscoiosMatch12.3yr
ORciscoiosMatch12.3ys
ORciscoiosMatch12.4
Related
nvd
nvd
CVE-2005-2105
2005-07-05 04:00:00
CVE-2007-4632
2007-08-31 23:17:00
nessus
nessus
Cisco IOS AAA RADIUS Long Username Authentication Bypass (CSCee45312)
2006-02-17 00:00:00
RADIUS Authentication Bypass (cisco-sa-20050629-aaa)
2010-09-01 00:00:00
cvelist
cvelist
CVE-2005-2105
2005-07-01 04:00:00
CVE-2007-4632
2007-08-31 23:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Authentication flaw
2007-08-31 23:17:00
cve
cve
CVE-2007-4632
2007-08-31 23:17:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2005-2105