PT-2005-4222 · Cisco · Cisco Css 11500

Published 2005-11-02 · Updated 2008-09-05 · CVE-2005-3426

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and device reload, via a malformed client certificate during SSL session negotiation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3426

Affected Products

Cisco Css 11500

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3426 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20051019-css.shtml · Vendor Advisory
• http://securitytracker.com/id?1015081 · Vendor Advisory
• http://securityfocus.com/bid/15144 · Note
• http://securityreason.com/securityalert/99 · Note
• http://secunia.com/advisories/17260 · Note