Lucene search

[email protected]CVE-2005-4499

HistoryDec 22, 2005 - 11:03 a.m.

CVE-2005-4499

2005-12-2211:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

pix

vpn

concentrators

radius

acl

vulnerability

cs acs

nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.9%

JSON

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.

CPENameOperatorVersion
cisco:vpn_3001_concentratorcisco vpn 3001 concentratoreq*
cisco:vpn_3015_concentratorcisco vpn 3015 concentratoreq*
cisco:vpn_3020_concentratorcisco vpn 3020 concentratoreq*
cisco:vpn_3030_concentatorcisco vpn 3030 concentatoreq*
cisco:vpn_3060_concentratorcisco vpn 3060 concentratoreq*
cisco:vpn_3080_concentratorcisco vpn 3080 concentratoreq*
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(4\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0.1.4
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0.4.3

CPE	Name	Operator	Version
cisco:vpn_3001_concentrator	cisco vpn 3001 concentrator	eq	*
cisco:vpn_3015_concentrator	cisco vpn 3015 concentrator	eq	*
cisco:vpn_3020_concentrator	cisco vpn 3020 concentrator	eq	*
cisco:vpn_3030_concentator	cisco vpn 3030 concentator	eq	*
cisco:vpn_3060_concentrator	cisco vpn 3060 concentrator	eq	*
cisco:vpn_3080_concentrator	cisco vpn 3080 concentrator	eq	*
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(4\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0.1.4
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0.4.3

Rows per page:

1-10 of 1531

References

secunia.com/advisories/18141

www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml

www.osvdb.org/22193

www.securityfocus.com/archive/1/420020/100/0/threaded

www.securityfocus.com/archive/1/420103/100/0/threaded

www.securityfocus.com/bid/16025

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.9%

JSON