CVE-2005-4499
Summary
| CVE | CVE-2005-4499 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-12-22 11:03:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0.1.4 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0.4.3 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(4\) | All | All | All |
| Application | Cisco | Pix Asa Ids | All | All | All | All |
| Application | Cisco | Pix Firewall | 6.2.2_.111 | All | All | All |
| Application | Cisco | Pix Firewall | 6.2.3_\(110\) | All | All | All |
| Application | Cisco | Pix Firewall | 6.3.3_\(133\) | All | All | All |
| Operating System | Cisco | Pix Firewall | All | All | All | All |
| Hardware | Cisco | Pix Firewall 501 | All | All | All | All |
| Hardware | Cisco | Pix Firewall 506 | All | All | All | All |
| Hardware | Cisco | Pix Firewall 515 | All | All | All | All |
| Hardware | Cisco | Pix Firewall 515e | All | All | All | All |
| Hardware | Cisco | Pix Firewall 520 | All | All | All | All |
| Hardware | Cisco | Pix Firewall 525 | All | All | All | All |
| Hardware | Cisco | Pix Firewall 535 | All | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 2.7 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 3.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 3.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.1\(6b\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.1\(6\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.2\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(7.202\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 4.4\(8\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1\(4.206\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.1\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(3.210\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(6\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(7\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(9\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1.200\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(4.101\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1.5\(104\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(4\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(3.100\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3.102\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3.109\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.3\(5\) | All | All | All |
| Application | Cisco | Secure Access Control Server | All | All | All | All |
| Application | Cisco | Secure Access Control Server | 2.0 | All | unix | All |
| Application | Cisco | Secure Access Control Server | 2.1 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.3 | All | unix | All |
| Application | Cisco | Secure Access Control Server | 2.3 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.3.5.1 | All | unix | All |
| Application | Cisco | Secure Access Control Server | 2.3.6.1 | All | unix | All |
| Application | Cisco | Secure Access Control Server | 2.4 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.42 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.5 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.6 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.6.2 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.6.3 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 2.6.4 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 3.0 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.0 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 3.0.1 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 3.0.3 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 3.1 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.1.1 | All | windows_nt | All |
| Application | Cisco | Secure Access Control Server | 3.2 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2 | All | windows_server | All |
| Application | Cisco | Secure Access Control Server | 3.2.1 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2.2 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2\(1.20\) | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2\(1\) | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2\(2\) | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.2\(3\) | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.3 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.3.1 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.3.2 | All | All | All |
| Application | Cisco | Secure Access Control Server | 3.3\(1\) | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.0 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.5.2.a | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.5.2.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.5.2.c | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.5.2.d | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 2.5.2.f | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.0 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.0.3.a | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.0.3.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.0.4 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.1.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.1.2 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.1.4 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.1\(rel\) | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5.2 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5.3 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5.4 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5.5 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.5\(rel\) | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.3 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.5 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7.a | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7.c | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7.d | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7.f | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 3.6.7d | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.0 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.0.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.0.2 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.0.5.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.1.5.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.1.7.a | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.1.7.b | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.7.1 | All | All | All |
| Operating System | Cisco | Vpn 3000 Concentrator Series Software | 4.7.1.f | All | All | All |
| Hardware | Cisco | Vpn 3001 Concentrator | All | All | All | All |
| Application | Cisco | Vpn 3002 Hardware Client | All | All | All | All |
| Operating System | Cisco | Vpn 3005 Concentrator Software | 4.0.1 | All | All | All |
| Hardware | Cisco | Vpn 3015 Concentrator | All | All | All | All |
| Hardware | Cisco | Vpn 3020 Concentrator | All | All | All | All |
| Hardware | Cisco | Vpn 3030 Concentator | All | All | All | All |
| Operating System | Cisco | Vpn 3030 Concentator | 4.7.1 | All | All | All |
| Operating System | Cisco | Vpn 3030 Concentator | 4.7.1.f | All | All | All |
| Hardware | Cisco | Vpn 3060 Concentrator | All | All | All | All |
| Hardware | Cisco | Vpn 3080 Concentrator | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| www.osvdb.org/22193 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Secunia - Advisories - Cisco Secure Access Control Server Downloadable IP Access Control List Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Field Notice: FN - 61965 - CS ACS for Windows Downloadable IP Access Control List Vulnerability [Cisco Secure Access Control Server for Windows] - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.