Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
BID:16025
Info
Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
| Bugtraq ID: | 16025 |
| Class: | Design Error |
| CVE: |
CVE-2005-4499 CVE-2005-4499 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2005 12:00AM |
| Updated: | Mar 19 2015 09:46AM |
| Credit: | Oleg Tipisov disclosed this issue. |
| Vulnerable: |
Cisco VPN 3080 Concentrator 4.7.1 F Cisco VPN 3080 Concentrator 4.7.1 Cisco VPN 3080 Concentrator Cisco VPN 3060 Concentrator 4.7.1 F Cisco VPN 3060 Concentrator 4.7.1 Cisco VPN 3060 Concentrator 3.5.2 Cisco VPN 3060 Concentrator Cisco VPN 3030 Concentrator 4.7.1 F Cisco VPN 3030 Concentrator 4.7.1 Cisco VPN 3030 Concentrator 4.0.2 Cisco VPN 3030 Concentrator Cisco VPN 3020 Concentrator 4.7.1 F Cisco VPN 3020 Concentrator 4.7.1 Cisco VPN 3020 Concentrator Cisco VPN 3015 Concentrator 4.7.1 F Cisco VPN 3015 Concentrator 4.7.1 Cisco VPN 3015 Concentrator Cisco VPN 3005 Concentrator 4.7.1 F Cisco VPN 3005 Concentrator 4.7.1 Cisco VPN 3005 Concentrator 4.0.1 Cisco VPN 3005 Concentrator 4.0 Cisco VPN 3005 Concentrator 3.6.7 F Cisco VPN 3005 Concentrator 3.6.7 D Cisco VPN 3005 Concentrator 3.6.7 C Cisco VPN 3005 Concentrator 3.6.7 B Cisco VPN 3005 Concentrator 3.6.7 A Cisco VPN 3005 Concentrator 3.6.7 Cisco VPN 3005 Concentrator 3.6.5 Cisco VPN 3005 Concentrator 3.6.3 Cisco VPN 3002 Hardware Client Cisco VPN 3001 Concentrator 0 Cisco VPN 3000 Concentrator 4.7.1 F Cisco VPN 3000 Concentrator 4.7.1 Cisco VPN 3000 Concentrator 4.1.5 .B Cisco VPN 3000 Concentrator 4.1 .x Cisco VPN 3000 Concentrator 4.0.5 .B Cisco VPN 3000 Concentrator 4.0.1 Cisco VPN 3000 Concentrator 4.0 .x Cisco VPN 3000 Concentrator 4.0 Cisco VPN 3000 Concentrator 3.6.7 D Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 Cisco VPN 3000 Concentrator 4.1.7.B Cisco VPN 3000 Concentrator 4.1.7.A Cisco Secure ACS for Windows Server 3.2 Cisco Secure ACS for Windows NT 3.3 Cisco Secure ACS for Windows NT 3.2 Cisco Secure ACS for Windows NT 3.1.1 Cisco Secure ACS for Windows NT 3.1 Cisco Secure ACS for Windows NT 3.0.3 Cisco Secure ACS for Windows NT 3.0 .1 Cisco Secure ACS for Windows NT 3.0 Cisco Secure ACS for Windows NT 2.42 Cisco Secure ACS for Windows NT 2.6.4 Cisco Secure ACS for Windows NT 2.6.3 Cisco Secure ACS for Windows NT 2.6.2 Cisco Secure ACS for Windows NT 2.6 Cisco Secure ACS for Windows NT 2.5 Cisco Secure ACS for Windows NT 2.4 Cisco Secure ACS for Windows NT 2.3 Cisco Secure ACS for Windows NT 2.1 Cisco Secure ACS for Unix 2.3.6 .1 Cisco Secure ACS for Unix 2.3.5 .1 Cisco Secure ACS for Unix 2.3 Cisco Secure ACS for Unix 2.0 Cisco Secure Access Control Server 3.3.2 Cisco Secure Access Control Server 3.3.1 Cisco Secure Access Control Server 3.3 (1) Cisco Secure Access Control Server 3.3 Cisco Secure Access Control Server 3.2.2 Cisco Secure Access Control Server 3.2.1 Cisco Secure Access Control Server 3.2 (3) Cisco Secure Access Control Server 3.2 (2) Cisco Secure Access Control Server 3.2 (1.20) Cisco Secure Access Control Server 3.2 (1) Cisco Secure Access Control Server 3.2 Cisco Secure Access Control Server 3.1 Cisco Secure Access Control Server 3.0 Cisco Secure Access Control Server Cisco PIX/ASA IDS 0 Cisco PIX/ASA 7.0.4 .3 Cisco PIX/ASA 7.0.4 Cisco PIX/ASA 7.0.1 .4 Cisco PIX/ASA 7.0 Cisco PIX OS Cisco PIX Firewall 535 0 Cisco PIX Firewall 525 6.3 Cisco PIX Firewall 525 Cisco PIX Firewall 520 Cisco PIX Firewall 515E Cisco PIX Firewall 515 Cisco PIX Firewall 506 0 Cisco PIX Firewall 501 0 Cisco PIX Firewall 6.3.3 (133) Cisco PIX Firewall 6.3.2 Cisco PIX Firewall 6.3.1 Cisco PIX Firewall 6.3 (5) Cisco PIX Firewall 6.3 (3.109) Cisco PIX Firewall 6.3 (3.102) Cisco PIX Firewall 6.3 (3) Cisco PIX Firewall 6.3 (1) Cisco PIX Firewall 6.3 Cisco PIX Firewall 6.2.3 (110) Cisco PIX Firewall 6.2.3 Cisco PIX Firewall 6.2.2 .111 Cisco PIX Firewall 6.2.2 Cisco PIX Firewall 6.2.1 Cisco PIX Firewall 6.2 (3.100) Cisco PIX Firewall 6.2 (3) Cisco PIX Firewall 6.2 (2) Cisco PIX Firewall 6.2 (1) Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1.5 (104) Cisco PIX Firewall 6.1.5 Cisco PIX Firewall 6.1.4 Cisco PIX Firewall 6.1.3 Cisco PIX Firewall 6.1 (5) Cisco PIX Firewall 6.1 (4) Cisco PIX Firewall 6.1 (3) Cisco PIX Firewall 6.1 (2) Cisco PIX Firewall 6.1 (1) Cisco PIX Firewall 6.1 Cisco PIX Firewall 6.0.4 Cisco PIX Firewall 6.0.3 Cisco PIX Firewall 6.0 (4.101) Cisco PIX Firewall 6.0 (4) Cisco PIX Firewall 6.0 (2) Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 6.0 Cisco PIX Firewall 5.3 (3) Cisco PIX Firewall 5.3 (2) Cisco PIX Firewall 5.3 (1.200) Cisco PIX Firewall 5.3 (1) Cisco PIX Firewall 5.3 Cisco PIX Firewall 5.2 (9) Cisco PIX Firewall 5.2 (7) Cisco PIX Firewall 5.2 (6) Cisco PIX Firewall 5.2 (5) Cisco PIX Firewall 5.2 (3.210) Cisco PIX Firewall 5.2 (2) Cisco PIX Firewall 5.2 (1) Cisco PIX Firewall 5.2 Cisco PIX Firewall 5.1.4 Cisco PIX Firewall 5.1 (4.206) Cisco PIX Firewall 5.1 Cisco PIX Firewall 5.0 Cisco PIX Firewall 4.4 (8) Cisco PIX Firewall 4.4 (7.202) Cisco PIX Firewall 4.4 (4) Cisco PIX Firewall 4.4 Cisco PIX Firewall 4.3 Cisco PIX Firewall 4.2.2 Cisco PIX Firewall 4.2.1 Cisco PIX Firewall 4.2 (5) Cisco PIX Firewall 4.2 Cisco PIX Firewall 4.1.6 b Cisco PIX Firewall 4.1.6 Cisco PIX Firewall 4.0 Cisco PIX Firewall 3.1 Cisco PIX Firewall 3.0 Cisco PIX Firewall 2.7 Cisco Firewall Services Module (FWSM) 0 Cisco Adaptive Security Appliance 7.0 |
| Not Vulnerable: | |
Discussion
Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
Cisco PIX and VPN 3000 concentrators, when managed by Cisco Secure Access Control Servers are vulnerable to an information disclosure vulnerability. This issue is due to a design flaw that communicates sensitive information over an unencrypted communications channel.
This issue allows remote attackers with the ability to gain access to sensitive information if they can sniff network packets traveling between affected devices and the RADIUS server. This information potentially aids them in further attacks.
Specific Cisco versions and products affected by this issue are not currently known. The list of affected packages will be updated as further information is disclosed.
Cisco PIX and VPN 3000 concentrators, when managed by Cisco Secure Access Control Servers are vulnerable to an information disclosure vulnerability. This issue is due to a design flaw that communicates sensitive information over an unencrypted communications channel.
This issue allows remote attackers with the ability to gain access to sensitive information if they can sniff network packets traveling between affected devices and the RADIUS server. This information potentially aids them in further attacks.
Specific Cisco versions and products affected by this issue are not currently known. The list of affected packages will be updated as further information is disclosed.
Exploit / POC
Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
Solution:
The vendor has released an advisory (Field Notice: FN - 61965 - CS ACS for Windows Downloadable IP Access Control List Vulnerability) to address this issue. Please see the referenced advisory for more information.
Solution:
The vendor has released an advisory (Field Notice: FN - 61965 - CS ACS for Windows Downloadable IP Access Control List Vulnerability) to address this issue. Please see the referenced advisory for more information.
References
Cisco Downloadable RADIUS Policies Information Disclosure Vulnerability
References:
References: