PT-2005-2043 · Cisco · Cisco Ios

Published 2005-04-09 · Updated 2017-10-11 · CVE-2005-1020

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.3

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This can occur in three scenarios: when a username containing a domain name is used with a TACACS+ server for authentication, when a new SSH session is in the login phase and a currently logged-in user issues a send command, or when the system is logging messages and an SSH session is terminated while the server is sending data.

Recommendations For Cisco IOS versions 12.0 through 12.3, consider disabling SSH 2 until a patch is available to prevent potential denial of service attacks. As a temporary workaround, restrict the use of TACACS+ server authentication and limit the issuance of send commands during the SSH login phase. Additionally, configure the system to handle logging messages and SSH session terminations more robustly to minimize the risk of device reloads.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2005-1020

Affected Products

Cisco Ios

References · 9

• http://securitytracker.com/alerts/2005/Apr/1013655.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1020 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtml · Vendor Advisory
• http://secunia.com/advisories/14854 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5455 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19990 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19987 · Note
• http://securityfocus.com/bid/13043 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19989 · Note