CVEvulnerability
CVE-2005-2105
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-07-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.
Affected configurations
• cisco ios 12.2\(2\)xr
• cisco ios 12.2\(4\)xr
• cisco ios 12.2t
• cisco ios 12.2xb
• cisco ios 12.2xc
• cisco ios 12.2xd
• cisco ios 12.2xe
• cisco ios 12.2xf
• cisco ios 12.2xg
• cisco ios 12.2xh
• cisco ios 12.2xi
• cisco ios 12.2xj
• cisco ios 12.2xk
• cisco ios 12.2xl
• cisco ios 12.2xm
• cisco ios 12.2xq
• cisco ios 12.2xr
• cisco ios 12.2xt
• cisco ios 12.2xw
• cisco ios 12.2ya
• cisco ios 12.2yb
• cisco ios 12.2yc
• cisco ios 12.2yd
• cisco ios 12.2yf
• cisco ios 12.2yg
• cisco ios 12.2yh
• cisco ios 12.2yj
• cisco ios 12.2yl
• cisco ios 12.2ym
• cisco ios 12.2yn
• cisco ios 12.2yp
• cisco ios 12.2yq
• cisco ios 12.2yr
• cisco ios 12.2yt
• cisco ios 12.2yu
• cisco ios 12.2yv
• cisco ios 12.2yw
• cisco ios 12.2yy
• cisco ios 12.2zb
• cisco ios 12.2zc
• cisco ios 12.2zd
• cisco ios 12.2ze
• cisco ios 12.2zf
• cisco ios 12.2zg
• cisco ios 12.2zh
• cisco ios 12.2zj
• cisco ios 12.2zl
• cisco ios 12.2zn
• cisco ios 12.2zo
• cisco ios 12.2zp
• cisco ios 12.3b
• cisco ios 12.3bc
• cisco ios 12.3bw
• cisco ios 12.3ja
• cisco ios 12.3t
• cisco ios 12.3xa
• cisco ios 12.3xb
• cisco ios 12.3xc
• cisco ios 12.3xd
• cisco ios 12.3xe
… and 32 more
References
- http://www.cisco.com/warp/public/707/cisco-sa-20050629-aaa.shtml Patch, Vendor Advisory
- http://www.securitytracker.com/alerts/2005/Jun/1014330.html Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21190 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756 oval.cisecurity.org
- http://www.cisco.com/warp/public/707/cisco-sa-20050629-aaa.shtml Patch, Vendor Advisory
- http://www.securitytracker.com/alerts/2005/Jun/1014330.html Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21190 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5756 oval.cisecurity.org