PT-2005-2078 · Cisco · Cisco Ios

Published 2005-04-12 · Updated 2017-10-11 · CVE-2005-1058

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2T, 12.3 and 12.3T

Description The issue allows remote attackers to bypass XAUTH authentication after Phase 1 negotiation when processing an ISAKMP profile. This occurs because certain attributes in the ISAKMP profile are not properly processed, enabling attackers to move to Phase 2 negotiations.

Recommendations For Cisco IOS versions 12.2T, 12.3 and 12.3T, consider disabling XAUTH authentication as a temporary workaround until a patch is available. Restrict access to ISAKMP profiles to minimize the risk of exploitation. Avoid using ISAKMP profiles that specify XAUTH authentication until the issue is resolved.

Fix

Related Identifiers

CVE-2005-1058

Affected Products

Cisco Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-1058 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738 · Note