PT-2005-4223 · Cisco · Cisco Ios Ips+1

Published 2005-11-02 · Updated 2017-07-11 · CVE-2005-3427

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Management Center (MC) for IPS Sensors (IPS MC) version 2.1

Description The issue can cause some signatures to be disabled, making it easier for attackers to escape detection, as the Cisco Management Center (MC) for IPS Sensors (IPS MC) can omit port field values while generating the Cisco IOS IPS configuration file.

Recommendations For Cisco Management Center (MC) for IPS Sensors (IPS MC) version 2.1, consider manually reviewing and updating the Cisco IOS IPS configuration file to ensure all necessary port field values are included to prevent signatures from being disabled.

Fix

Related Identifiers

CVE-2005-3427

Affected Products

Cisco Ios Ips

Cisco Management Center (Mc) For Ips Sensors

References · 10

• http://cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3427 · Security Note
• http://vupen.com/english/advisories/2005/2266 · Note
• http://securityreason.com/securityalert/137 · Note
• http://kb.cert.org/vuls/id/154883 · Note
• http://securitytracker.com/id?1015133 · Note
• http://osvdb.org/20444 · Note
• http://secunia.com/advisories/17397 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22926 · Note
• http://securityfocus.com/bid/15269 · Note