PT-2005-3580 · Cisco · Intrusion Prevention System+3

Publicado 2005-08-25 · Atualizado 2017-07-11 · CVE-2005-2695

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CiscoWorks Management Center for IDS Sensors (IDSMC) versions 2.0 through 2.1 Cisco Monitoring Center for Security (Security Monitor or Secmon) versions 1.1 through 2.1

Description The issue affects the SSL certificate checking functionality, allowing remote attackers to spoof a Cisco Intrusion Detection Sensor (IDS) or Intrusion Prevention System (IPS).

Recommendations For CiscoWorks Management Center for IDS Sensors (IDSMC) versions 2.0 through 2.1, update the SSL certificate checking functionality to prevent spoofing. For Cisco Monitoring Center for Security (Security Monitor or Secmon) versions 1.1 through 2.1, update the SSL certificate checking functionality to prevent spoofing.

Correção

Identificadores relacionados

CVE-2005-2695

Produtos afetados

Cisco Monitoring Center For Security

Ciscoworks Management Center For Ids Sensors

Intrusion Detection Sensor

Intrusion Prevention System

Referências · 5

• http://secunia.com/advisories/16544 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2695 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21946 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/14628 · Nota