Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.

Published

2005-12-22T11:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Hardware	cisco	vpn_3001_concentrator	*	Yes
Hardware	cisco	vpn_3015_concentrator	*	Yes
Hardware	cisco	vpn_3020_concentrator	*	Yes
Hardware	cisco	vpn_3030_concentator	*	Yes
Hardware	cisco	vpn_3060_concentrator	*	Yes
Hardware	cisco	vpn_3080_concentrator	*	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.1.4	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.4.3	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.0	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.5.2.a	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.5.2.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.5.2.c	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.5.2.d	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	2.5.2.f	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.0	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.0.3.a	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.0.3.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.0.4	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.1\(rel\)	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.1.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.1.2	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.1.4	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5\(rel\)	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5.2	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5.3	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5.4	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.5.5	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.3	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.5	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7.a	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7.c	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7.d	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7.f	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	3.6.7d	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.0	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.0.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.0.2	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.0.5.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.1.5.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.1.7.a	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.1.7.b	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.7.1	Yes
Operating System	cisco	vpn_3000_concentrator_series_software	4.7.1.f	Yes
Operating System	cisco	vpn_3005_concentrator_software	4.0.1	Yes
Operating System	cisco	vpn_3030_concentator	4.7.1	Yes
Operating System	cisco	vpn_3030_concentator	4.7.1.f	Yes
Application	cisco	pix_asa_ids	*	Yes
Application	cisco	pix_firewall	6.2.2_.111	Yes
Application	cisco	pix_firewall	6.2.3_\(110\)	Yes
Application	cisco	pix_firewall	6.3.3_\(133\)	Yes
Application	cisco	secure_access_control_server	*	Yes
Application	cisco	secure_access_control_server	2.0	Yes
Application	cisco	secure_access_control_server	2.1	Yes
Application	cisco	secure_access_control_server	2.3	Yes
Application	cisco	secure_access_control_server	2.3	Yes
Application	cisco	secure_access_control_server	2.3.5.1	Yes
Application	cisco	secure_access_control_server	2.3.6.1	Yes
Application	cisco	secure_access_control_server	2.4	Yes
Application	cisco	secure_access_control_server	2.5	Yes
Application	cisco	secure_access_control_server	2.6	Yes
Application	cisco	secure_access_control_server	2.6.2	Yes
Application	cisco	secure_access_control_server	2.6.3	Yes
Application	cisco	secure_access_control_server	2.6.4	Yes
Application	cisco	secure_access_control_server	2.42	Yes
Application	cisco	secure_access_control_server	3.0	Yes
Application	cisco	secure_access_control_server	3.0	Yes
Application	cisco	secure_access_control_server	3.0.1	Yes
Application	cisco	secure_access_control_server	3.0.3	Yes
Application	cisco	secure_access_control_server	3.1	Yes
Application	cisco	secure_access_control_server	3.1.1	Yes
Application	cisco	secure_access_control_server	3.2	Yes
Application	cisco	secure_access_control_server	3.2	Yes
Application	cisco	secure_access_control_server	3.2\(1\)	Yes
Application	cisco	secure_access_control_server	3.2\(1.20\)	Yes
Application	cisco	secure_access_control_server	3.2\(2\)	Yes
Application	cisco	secure_access_control_server	3.2\(3\)	Yes
Application	cisco	secure_access_control_server	3.2.1	Yes
Application	cisco	secure_access_control_server	3.2.2	Yes
Application	cisco	secure_access_control_server	3.3	Yes
Application	cisco	secure_access_control_server	3.3\(1\)	Yes
Application	cisco	secure_access_control_server	3.3.1	Yes
Application	cisco	secure_access_control_server	3.3.2	Yes
Application	cisco	vpn_3002_hardware_client	*	Yes
Hardware	cisco	pix_firewall_501	*	Yes
Hardware	cisco	pix_firewall_506	*	Yes
Hardware	cisco	pix_firewall_515	*	Yes
Hardware	cisco	pix_firewall_515e	*	Yes
Hardware	cisco	pix_firewall_520	*	Yes
Hardware	cisco	pix_firewall_525	*	Yes
Hardware	cisco	pix_firewall_535	*	Yes
Operating System	cisco	pix_firewall	*	Yes
Operating System	cisco	pix_firewall_software	2.7	Yes
Operating System	cisco	pix_firewall_software	3.0	Yes
Operating System	cisco	pix_firewall_software	3.1	Yes
Operating System	cisco	pix_firewall_software	4.0	Yes
Operating System	cisco	pix_firewall_software	4.1\(6\)	Yes
Operating System	cisco	pix_firewall_software	4.1\(6b\)	Yes
Operating System	cisco	pix_firewall_software	4.2	Yes
Operating System	cisco	pix_firewall_software	4.2\(1\)	Yes
Operating System	cisco	pix_firewall_software	4.2\(2\)	Yes
Operating System	cisco	pix_firewall_software	4.2\(5\)	Yes
Operating System	cisco	pix_firewall_software	4.3	Yes
Operating System	cisco	pix_firewall_software	4.4	Yes
Operating System	cisco	pix_firewall_software	4.4\(4\)	Yes
Operating System	cisco	pix_firewall_software	4.4\(7.202\)	Yes
Operating System	cisco	pix_firewall_software	4.4\(8\)	Yes
Operating System	cisco	pix_firewall_software	5.0	Yes
Operating System	cisco	pix_firewall_software	5.1	Yes
Operating System	cisco	pix_firewall_software	5.1\(4\)	Yes
Operating System	cisco	pix_firewall_software	5.1\(4.206\)	Yes
Operating System	cisco	pix_firewall_software	5.2	Yes
Operating System	cisco	pix_firewall_software	5.2\(1\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(2\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(3.210\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(5\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(6\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(7\)	Yes
Operating System	cisco	pix_firewall_software	5.2\(9\)	Yes
Operating System	cisco	pix_firewall_software	5.3	Yes
Operating System	cisco	pix_firewall_software	5.3\(1\)	Yes
Operating System	cisco	pix_firewall_software	5.3\(1.200\)	Yes
Operating System	cisco	pix_firewall_software	5.3\(2\)	Yes
Operating System	cisco	pix_firewall_software	5.3\(3\)	Yes
Operating System	cisco	pix_firewall_software	6.0	Yes
Operating System	cisco	pix_firewall_software	6.0\(1\)	Yes
Operating System	cisco	pix_firewall_software	6.0\(2\)	Yes
Operating System	cisco	pix_firewall_software	6.0\(3\)	Yes
Operating System	cisco	pix_firewall_software	6.0\(4\)	Yes
Operating System	cisco	pix_firewall_software	6.0\(4.101\)	Yes
Operating System	cisco	pix_firewall_software	6.1	Yes
Operating System	cisco	pix_firewall_software	6.1\(1\)	Yes
Operating System	cisco	pix_firewall_software	6.1\(2\)	Yes
Operating System	cisco	pix_firewall_software	6.1\(3\)	Yes
Operating System	cisco	pix_firewall_software	6.1\(4\)	Yes
Operating System	cisco	pix_firewall_software	6.1\(5\)	Yes
Operating System	cisco	pix_firewall_software	6.1.5\(104\)	Yes
Operating System	cisco	pix_firewall_software	6.2	Yes
Operating System	cisco	pix_firewall_software	6.2\(1\)	Yes
Operating System	cisco	pix_firewall_software	6.2\(2\)	Yes
Operating System	cisco	pix_firewall_software	6.2\(3\)	Yes
Operating System	cisco	pix_firewall_software	6.2\(3.100\)	Yes
Operating System	cisco	pix_firewall_software	6.3	Yes
Operating System	cisco	pix_firewall_software	6.3\(1\)	Yes
Operating System	cisco	pix_firewall_software	6.3\(2\)	Yes
Operating System	cisco	pix_firewall_software	6.3\(3\)	Yes
Operating System	cisco	pix_firewall_software	6.3\(3.102\)	Yes
Operating System	cisco	pix_firewall_software	6.3\(3.109\)	Yes
Operating System	cisco	pix_firewall_software	6.3\(5\)	Yes

References

http://secunia.com/advisories/18141 ([email protected])
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml ([email protected])
http://www.osvdb.org/22193 ([email protected])
http://www.securityfocus.com/archive/1/420020/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/420103/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/16025 ([email protected])
http://secunia.com/advisories/18141 (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/22193 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/420020/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/420103/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/16025 (af854a3a-2127-422b-91ae-364da2661108)