PT-2005-3580 · Cisco · Intrusion Prevention System+3

Published 2005-08-25 · Updated 2017-07-11 · CVE-2005-2695

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CiscoWorks Management Center for IDS Sensors (IDSMC) versions 2.0 through 2.1 Cisco Monitoring Center for Security (Security Monitor or Secmon) versions 1.1 through 2.1

Description The issue affects the SSL certificate checking functionality, allowing remote attackers to spoof a Cisco Intrusion Detection Sensor (IDS) or Intrusion Prevention System (IPS).

Recommendations For CiscoWorks Management Center for IDS Sensors (IDSMC) versions 2.0 through 2.1, update the SSL certificate checking functionality to prevent spoofing. For Cisco Monitoring Center for Security (Security Monitor or Secmon) versions 1.1 through 2.1, update the SSL certificate checking functionality to prevent spoofing.

Fix

Related Identifiers

CVE-2005-2695

Affected Products

Cisco Monitoring Center For Security

Ciscoworks Management Center For Ids Sensors

Intrusion Detection Sensor

Intrusion Prevention System

References · 5

• http://secunia.com/advisories/16544 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2695 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050824-idsmc.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21946 · Note
• http://securityfocus.com/bid/14628 · Note