PT-2005-2043 · Cisco · Cisco Ios

Publicado 2005-04-09 · Atualizado 2017-10-11 · CVE-2005-1020

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.3

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This can occur in three scenarios: when a username containing a domain name is used with a TACACS+ server for authentication, when a new SSH session is in the login phase and a currently logged-in user issues a send command, or when the system is logging messages and an SSH session is terminated while the server is sending data.

Recommendations For Cisco IOS versions 12.0 through 12.3, consider disabling SSH 2 until a patch is available to prevent potential denial of service attacks. As a temporary workaround, restrict the use of TACACS+ server authentication and limit the issuance of send commands during the SSH login phase. Additionally, configure the system to handle logging messages and SSH session terminations more robustly to minimize the risk of device reloads.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2005-1020

Produtos afetados

Cisco Ios

Referências · 9

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19990 · Nota
• http://securitytracker.com/alerts/2005/Apr/1013655.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1020 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19987 · Nota
• http://securityfocus.com/bid/13043 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19989 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml · Aviso do Fabricante
• http://secunia.com/advisories/14854 · Aviso do Fabricante