CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-12-22

Last modified

2024-08-07

Affected products

• Adaptive Security Appliance Software (Cisco)
• Pix Asa Ids (Cisco)
• Pix Firewall (Cisco)
• Pix Firewall 501 (Cisco)
• Pix Firewall 506 (Cisco)
• Pix Firewall 515 (Cisco)
• Pix Firewall 515e (Cisco)
• Pix Firewall 520 (Cisco)
• Pix Firewall 525 (Cisco)
• Pix Firewall 535 (Cisco)
• Pix Firewall Software (Cisco)
• Secure Access Control Server (Cisco)
• Vpn 3000 Concentrator Series Software (Cisco)
• Vpn 3001 Concentrator (Cisco)
• Vpn 3002 Hardware Client (Cisco)
• Vpn 3005 Concentrator Software (Cisco)
• Vpn 3015 Concentrator (Cisco)
• Vpn 3020 Concentrator (Cisco)
• Vpn 3030 Concentator (Cisco)
• Vpn 3060 Concentrator (Cisco)
• Vpn 3080 Concentrator (Cisco)

References

• http://secunia.com/advisories/18141
• http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml
• http://www.osvdb.org/22193
• http://www.securityfocus.com/archive/1/420020/100/0/threaded
• http://www.securityfocus.com/archive/1/420103/100/0/threaded
• http://www.securityfocus.com/bid/16025