CVE-2005-4499 (CNNVD-200512-542)
HIGH
中文标题:
Cisco PIX/CS ACS可下载RADIUS策略信息泄露漏洞
英文标题:
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL o...
CVSS分数:
7.5
发布时间:
2005-12-22 11:00:00
漏洞类型:
其他
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Cisco PIX是非常流行的网络防火墙，而CS ACS则是提供验证、授权和帐户服务的网络设备。 Cisco PIX在进行网络管理通讯时存在漏洞，攻击者可能利用此漏洞非授权获得对设备的访问。 管理员在Cisco安全接入控制服务器(CS ACS Radius服务器)上创建ACL时，会分配内部名称#ACSACL#-IP-uacl-<随机>，例如#ACSACL#-IP-uacl-43a97a9d。同时CS ACS还会创建名为#ACSACL#-IP-uacl-43a97a9d的内部隐藏用户，口令为#ACSACL#-IP-uacl-43a97a9d (!)。CS ACS GUI无法看到该用户。 PIX使用的协议下载ACL步骤如下： 0) 用户以HTTP(s)通过PIX访问Internet；PIX请求用户名和口令，然后用户在对话框中输入用户名和口令。 1) PIX向CS ACS发送Radius访问请求认证用户(用户口令由Radius加密)。 2) Radius服务器认证用户，以ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-uacl-43a97a9d值发送回cisco-av-pair厂商特定属性(VSA)。 3) PIX再次发送Radius访问请求认证用户#ACSACL#-IP-uacl-43a97a9d 4) Radius服务器认证用户，以另一个cisco-av-pair VSA属性发送回ACL体(ip:inacl#1= ...)。 这意味着任何人都可以通过sniffer看到Radius协议通过网络从CS ACS服务器发送给PIX的明文#ACSACL#-IP-uacl-43a97a9d用户名，而该用户的口令与用户名相同。如果网络设备配置为使用同一CS ACS服务器进行登录认证的话，就可以使用嗅探到的用户名登录到该网络设备。
英文描述:
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
CWE类型:
（暂无数据）
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | vpn_3001_concentrator | * | - | - |
cpe:2.3:h:cisco:vpn_3001_concentrator:*:*:*:*:*:*:*:*
|
| cisco | vpn_3015_concentrator | * | - | - |
cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*
|
| cisco | vpn_3020_concentrator | * | - | - |
cpe:2.3:h:cisco:vpn_3020_concentrator:*:*:*:*:*:*:*:*
|
| cisco | vpn_3030_concentator | * | - | - |
cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*
|
| cisco | vpn_3060_concentrator | * | - | - |
cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*
|
| cisco | vpn_3080_concentrator | * | - | - |
cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 7.0 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 7.0\(4\) | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0\(4\):*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 7.0.1.4 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.1.4:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 7.0.4.3 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0.4.3:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.0 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.5.2.a | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.5.2.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.5.2.c | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.5.2.d | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 2.5.2.f | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.0 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.0.3.a | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.0.3.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.0.4 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.1\(rel\) | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\(rel\):*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.1.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.1.2 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.1.4 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5\(rel\) | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5.2 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5.3 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5.4 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.5.5 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.3 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.5 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7.a | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7.c | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7.d | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7.f | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.f:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 3.6.7d | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.0 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.0.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.0.2 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.2:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.0.5.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.1.5.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.1.7.a | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.1.7.b | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.7.1 | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*
|
| cisco | vpn_3000_concentrator_series_software | 4.7.1.f | - | - |
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*
|
| cisco | vpn_3005_concentrator_software | 4.0.1 | - | - |
cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*
|
| cisco | vpn_3030_concentator | 4.7.1 | - | - |
cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1:*:*:*:*:*:*:*
|
| cisco | vpn_3030_concentator | 4.7.1.f | - | - |
cpe:2.3:o:cisco:vpn_3030_concentator:4.7.1.f:*:*:*:*:*:*:*
|
| cisco | pix_asa_ids | * | - | - |
cpe:2.3:a:cisco:pix_asa_ids:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall | 6.2.2_.111 | - | - |
cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*
|
| cisco | pix_firewall | 6.2.3_\(110\) | - | - |
cpe:2.3:a:cisco:pix_firewall:6.2.3_\(110\):*:*:*:*:*:*:*
|
| cisco | pix_firewall | 6.3.3_\(133\) | - | - |
cpe:2.3:a:cisco:pix_firewall:6.3.3_\(133\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | * | - | - |
cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.0 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.0:*:unix:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.3 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.3.5.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.3.5.1:*:unix:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.3.6.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.3.6.1:*:unix:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.4 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.4:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.5 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.5:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.6 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.6:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.6.2 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.6.3 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.6.4 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 2.42 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:2.42:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.0 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.0.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.0.3 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.0.3:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.1.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.1.1:*:windows_nt:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2\(1\) | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2\(1\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2\(1.20\) | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2\(1.20\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2\(2\) | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2\(2\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2\(3\) | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2\(3\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2.1:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.2.2 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.2.2:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.3 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.3\(1\) | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.3\(1\):*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.3.1 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.3.1:*:*:*:*:*:*:*
|
| cisco | secure_access_control_server | 3.3.2 | - | - |
cpe:2.3:a:cisco:secure_access_control_server:3.3.2:*:*:*:*:*:*:*
|
| cisco | vpn_3002_hardware_client | * | - | - |
cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_501 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_506 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_515 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_515e | * | - | - |
cpe:2.3:h:cisco:pix_firewall_515e:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_520 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_525 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_535 | * | - | - |
cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall | * | - | - |
cpe:2.3:o:cisco:pix_firewall:*:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 2.7 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:2.7:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 3.0 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:3.0:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 3.1 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:3.1:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.0 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.0:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.1\(6\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.1\(6\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.1\(6b\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.1\(6b\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.2 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.2:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.2\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.2\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.2\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.2\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.2\(5\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.2\(5\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.3 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.4 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.4:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.4\(4\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.4\(4\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.4\(7.202\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.4\(7.202\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 4.4\(8\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:4.4\(8\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.0 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.1 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.1\(4\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.1\(4\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.1\(4.206\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.1\(4.206\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(3.210\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(3.210\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(5\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(5\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(6\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(6\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(7\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(7\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.2\(9\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.2\(9\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.3 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.3\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.3\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.3\(1.200\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.3\(1.200\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.3\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.3\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 5.3\(3\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:5.3\(3\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0\(3\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0\(3\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0\(4\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0\(4\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.0\(4.101\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.0\(4.101\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1\(3\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1\(3\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1\(4\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1\(4\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1\(5\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1\(5\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.1.5\(104\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.1.5\(104\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.2 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.2\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.2\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.2\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.2\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.2\(3\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.2\(3\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.2\(3.100\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.2\(3.100\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3 | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(1\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(1\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(2\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(2\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(3\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(3\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(3.102\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(3.102\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(3.109\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(3.109\):*:*:*:*:*:*:*
|
| cisco | pix_firewall_software | 6.3\(5\) | - | - |
cpe:2.3:o:cisco:pix_firewall_software:6.3\(5\):*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
20051221 Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
mailing-list
cve.org
访问
cve.org
16025
vdb-entry
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
22193
vdb-entry
cve.org
访问
cve.org
20051222 Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
mailing-list
cve.org
访问
cve.org
18141
third-party-advisory
cve.org
访问
cve.org
CVSS评分详情
7.5
HIGH
CVSS向量:
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS版本:
2.0
机密性
PARTIAL
完整性
PARTIAL
可用性
PARTIAL
时间信息
发布时间:
2005-12-22 11:00:00
修改时间:
2024-08-07 23:46:05
创建时间:
2025-11-11 15:32:30
更新时间:
2025-11-11 15:49:03
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2005-4499 |
2025-11-11 15:17:38 | 2025-11-11 07:32:30 |
| NVD | nvd_CVE-2005-4499 |
2025-11-11 14:51:21 | 2025-11-11 07:41:16 |
| CNNVD | cnnvd_CNNVD-200512-542 |
2025-11-11 15:08:49 | 2025-11-11 07:49:03 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:49:03
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-200512-542; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-200512-542
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:41:16
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.5; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:P/I:P/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 153; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.5
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:P/I:P/A:P
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 153
- data_sources: ['cve'] -> ['cve', 'nvd']