PT-2005-5540 · Cisco · Cisco Secure Access Control Server+2

Published 1970-01-01 · Updated 2024-07-02 · CVE-2005-4499

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco PIX and VPN 3000 concentrators (affected versions not specified)

Description The issue exists in the downloadable RADIUS ACLs feature, where a random internal name for an ACL is generated and also used as a hidden username and password. This allows remote attackers to gain privileges by obtaining the username from the cleartext portion of a RADIUS session and then using the password to log in to another device that uses Cisco Secure Access Control Server (CS ACS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-00146

BDU:2015-00147

CVE-2005-4499

Affected Products

Cisco Pix

Cisco Secure Access Control Server

Vpn 3000

References · 10

• https://bdu.fstec.ru/vul/2015-00147 · Security Note
• https://bdu.fstec.ru/vul/2015-00146 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-4499 · Security Note
• http://osvdb.org/22193 · Note
• http://secunia.com/advisories/18141 · Note
• http://securityfocus.com/archive/1/420020/100/0/threaded · Note
• http://securityfocus.com/bid/16025 · Note
• http://cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml · Note
• http://securityfocus.com/archive/1/420103/100/0/threaded · Note