CVE-2005-1020: High severity Cisco IOS vulnerability
Published Apr 9, 2005
·Updated
Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
Affected Software
337 affected components
Cisco IOS=12.0
Cisco IOS=12.0\(23\)s4
Cisco IOS=12.0\(23\)s5
Cisco IOS=12.0\(24\)s1
Cisco IOS=12.0\(24\)s4
Cisco IOS=12.0\(24\)s5
Cisco IOS=12.0\(24.2\)s
Cisco IOS=12.0\(26\)s1
Cisco IOS=12.0\(27\)s
Cisco IOS=12.0\(27\)sv
Cisco IOS=12.0\(27\)sv1
Cisco IOS=12.0da
Cisco IOS=12.0db
Cisco IOS=12.0dc
Cisco IOS=12.0s
Cisco IOS=12.0sc
Cisco IOS=12.0sl
Cisco IOS=12.0sp
Cisco IOS=12.0st
Cisco IOS=12.0sv
Cisco IOS=12.0sx
Cisco IOS=12.0sy
Cisco IOS=12.0sz
Cisco IOS=12.0t
Cisco IOS=12.0w5
Cisco IOS=12.0wc
Cisco IOS=12.0wt
Cisco IOS=12.0wx
Cisco IOS=12.0xa
Cisco IOS=12.0xb
Cisco IOS=12.0xc
Cisco IOS=12.0xd
Cisco IOS=12.0xe
Cisco IOS=12.0xf
Cisco IOS=12.0xg
Cisco IOS=12.0xh
Cisco IOS=12.0xi
Cisco IOS=12.0xj
Cisco IOS=12.0xk
Cisco IOS=12.0xl
Cisco IOS=12.0xm
Cisco IOS=12.0xn
Cisco IOS=12.0xp
Cisco IOS=12.0xq
Cisco IOS=12.0xr
Cisco IOS=12.0xs
Cisco IOS=12.0xt
Cisco IOS=12.0xu
Cisco IOS=12.0xv
Cisco IOS=12.0xw
Cisco IOS=12.1
Cisco IOS=12.1\(11\)e
Cisco IOS=12.1\(11b\)e
Cisco IOS=12.1\(11b\)e12
Cisco IOS=12.1\(11b\)e14
Cisco IOS=12.1\(13\)e9
Cisco IOS=12.1\(19\)e1
Cisco IOS=12.1\(20\)e
Cisco IOS=12.1\(20\)e1
Cisco IOS=12.1\(20\)e2
Cisco IOS=12.1\(20\)ea1
Cisco IOS=12.1\(20\)ec
Cisco IOS=12.1\(20\)ec1
Cisco IOS=12.1\(20\)eo
Cisco IOS=12.1\(20\)ew
Cisco IOS=12.1\(20\)ew1
Cisco IOS=12.1aa
Cisco IOS=12.1ax
Cisco IOS=12.1ay
Cisco IOS=12.1az
Cisco IOS=12.1cx
Cisco IOS=12.1da
Cisco IOS=12.1db
Cisco IOS=12.1dc
Cisco IOS=12.1e
Cisco IOS=12.1ea
Cisco IOS=12.1eb
Cisco IOS=12.1ec
Cisco IOS=12.1eo
Cisco IOS=12.1eu
Cisco IOS=12.1ev
Cisco IOS=12.1ew
Cisco IOS=12.1ex
Cisco IOS=12.1ey
Cisco IOS=12.1m
Cisco IOS=12.1t
Cisco IOS=12.1xa
Cisco IOS=12.1xb
Cisco IOS=12.1xc
Cisco IOS=12.1xd
Cisco IOS=12.1xe
Cisco IOS=12.1xf
Cisco IOS=12.1xg
Cisco IOS=12.1xh
Cisco IOS=12.1xi
Cisco IOS=12.1xj
Cisco IOS=12.1xk
Cisco IOS=12.1xl
Cisco IOS=12.1xm
Cisco IOS=12.1xp
Cisco IOS=12.1xq
Cisco IOS=12.1xr
Cisco IOS=12.1xs
Cisco IOS=12.1xt
Cisco IOS=12.1xu
Cisco IOS=12.1xv
Cisco IOS=12.1xw
Cisco IOS=12.1xx
Cisco IOS=12.1xy
Cisco IOS=12.1xz
Cisco IOS=12.1ya
Cisco IOS=12.1yb
Cisco IOS=12.1yc
Cisco IOS=12.1yd
Cisco IOS=12.1ye
Cisco IOS=12.1yf
Cisco IOS=12.1yh
Cisco IOS=12.1yi
Cisco IOS=12.1yj
Cisco IOS=12.2
Cisco IOS=12.2\(1\)xa
Cisco IOS=12.2\(1\)xd
Cisco IOS=12.2\(1\)xd1
Cisco IOS=12.2\(1\)xd3
Cisco IOS=12.2\(1\)xd4
Cisco IOS=12.2\(1\)xe
Cisco IOS=12.2\(1\)xe2
Cisco IOS=12.2\(1\)xe3
Cisco IOS=12.2\(1\)xh
Cisco IOS=12.2\(1\)xq
Cisco IOS=12.2\(1\)xs
Cisco IOS=12.2\(1\)xs1
Cisco IOS=12.2\(2\)t4
Cisco IOS=12.2\(2\)xa
Cisco IOS=12.2\(2\)xa1
Cisco IOS=12.2\(2\)xa5
Cisco IOS=12.2\(2\)xb
Cisco IOS=12.2\(2\)xb3
Cisco IOS=12.2\(2\)xb4
Cisco IOS=12.2\(2\)xf
Cisco IOS=12.2\(2\)xg
Cisco IOS=12.2\(2\)xh
Cisco IOS=12.2\(2\)xh2
Cisco IOS=12.2\(2\)xh3
Cisco IOS=12.2\(2\)xi
Cisco IOS=12.2\(2\)xi1
Cisco IOS=12.2\(2\)xi2
Cisco IOS=12.2\(2\)xj
Cisco IOS=12.2\(2\)xj1
Cisco IOS=12.2\(2\)xk
Cisco IOS=12.2\(2\)xk2
Cisco IOS=12.2\(2\)xn
Cisco IOS=12.2\(2\)xt
Cisco IOS=12.2\(2\)xt3
Cisco IOS=12.2\(2\)xu
Cisco IOS=12.2\(2\)xu2
Cisco IOS=12.2\(4\)ja
Cisco IOS=12.2\(4\)ja1
Cisco IOS=12.2\(8\)ja
Cisco IOS=12.2\(11\)ja
Cisco IOS=12.2\(11\)ja1
Cisco IOS=12.2\(11\)t
Cisco IOS=12.2\(12g\)
Cisco IOS=12.2\(12h\)
Cisco IOS=12.2\(14\)sy
Cisco IOS=12.2\(14\)sy1
Cisco IOS=12.2\(14\)sz
Cisco IOS=12.2\(14\)za
Cisco IOS=12.2\(14\)za2
Cisco IOS=12.2\(14.5\)
Cisco IOS=12.2\(14.5\)t
Cisco IOS=12.2\(15\)zn
Cisco IOS=12.2\(15.1\)s
Cisco IOS=12.2\(16\)b
Cisco IOS=12.2\(16.1\)b
Cisco IOS=12.2\(17a\)sxa
Cisco IOS=12.2\(18\)ew
Cisco IOS=12.2\(18\)ewa
Cisco IOS=12.2\(18\)s
Cisco IOS=12.2\(18\)se
Cisco IOS=12.2\(18\)sv
Cisco IOS=12.2\(18\)sw
Cisco IOS=12.2\(20\)ew
Cisco IOS=12.2\(20\)s
Cisco IOS=12.2\(20\)s1
Cisco IOS=12.2\(21\)
Cisco IOS=12.2\(21a\)
Cisco IOS=12.2\(23\)
Cisco IOS=12.2b
Cisco IOS=12.2bc
Cisco IOS=12.2bw
Cisco IOS=12.2bx
Cisco IOS=12.2by
Cisco IOS=12.2bz
Cisco IOS=12.2cx
Cisco IOS=12.2cy
Cisco IOS=12.2cz
Cisco IOS=12.2da
Cisco IOS=12.2dd
Cisco IOS=12.2dx
Cisco IOS=12.2ew
Cisco IOS=12.2ewa
Cisco IOS=12.2ja
Cisco IOS=12.2jk
Cisco IOS=12.2mb
Cisco IOS=12.2mc
Cisco IOS=12.2mx
Cisco IOS=12.2s
Cisco IOS=12.2se
Cisco IOS=12.2su
Cisco IOS=12.2sv
Cisco IOS=12.2sw
Cisco IOS=12.2sx
Cisco IOS=12.2sxa
Cisco IOS=12.2sxb
Cisco IOS=12.2sxd
Cisco IOS=12.2sy
Cisco IOS=12.2sz
Cisco IOS=12.2t
Cisco IOS=12.2x
Cisco IOS=12.2xa
Cisco IOS=12.2xb
Cisco IOS=12.2xc
Cisco IOS=12.2xd
Cisco IOS=12.2xe
Cisco IOS=12.2xf
Cisco IOS=12.2xg
Cisco IOS=12.2xh
Cisco IOS=12.2xi
Cisco IOS=12.2xj
Cisco IOS=12.2xk
Cisco IOS=12.2xl
Cisco IOS=12.2xm
Cisco IOS=12.2xn
Cisco IOS=12.2xq
Cisco IOS=12.2xr
Cisco IOS=12.2xs
Cisco IOS=12.2xt
Cisco IOS=12.2xu
Cisco IOS=12.2xw
Cisco IOS=12.2xz
Cisco IOS=12.2ya
Cisco IOS=12.2yb
Cisco IOS=12.2yc
Cisco IOS=12.2yd
Cisco IOS=12.2ye
Cisco IOS=12.2yf
Cisco IOS=12.2yg
Cisco IOS=12.2yh
Cisco IOS=12.2yj
Cisco IOS=12.2yk
Cisco IOS=12.2yl
Cisco IOS=12.2ym
Cisco IOS=12.2yn
Cisco IOS=12.2yo
Cisco IOS=12.2yp
Cisco IOS=12.2yq
Cisco IOS=12.2yr
Cisco IOS=12.2ys
Cisco IOS=12.2yt
Cisco IOS=12.2yu
Cisco IOS=12.2yv
Cisco IOS=12.2yw
Cisco IOS=12.2yx
Cisco IOS=12.2yy
Cisco IOS=12.2yz
Cisco IOS=12.2za
Cisco IOS=12.2zb
Cisco IOS=12.2zc
Cisco IOS=12.2zd
Cisco IOS=12.2ze
Cisco IOS=12.2zf
Cisco IOS=12.2zg
Cisco IOS=12.2zh
Cisco IOS=12.2zi
Cisco IOS=12.2zj
Cisco IOS=12.2zk
Cisco IOS=12.2zl
Cisco IOS=12.2zm
Cisco IOS=12.2zn
Cisco IOS=12.2zo
Cisco IOS=12.2zp
Cisco IOS=12.2zq
Cisco IOS=12.3
Cisco IOS=12.3\(2\)t3
Cisco IOS=12.3\(2\)xc1
Cisco IOS=12.3\(2\)xc2
Cisco IOS=12.3\(4\)t
Cisco IOS=12.3\(4\)t1
Cisco IOS=12.3\(4\)t2
Cisco IOS=12.3\(4\)t3
Cisco IOS=12.3\(4\)xd
Cisco IOS=12.3\(4\)xd1
Cisco IOS=12.3\(5\)
Cisco IOS=12.3\(5a\)
Cisco IOS=12.3\(5a\)b
Cisco IOS=12.3\(5b\)
Cisco IOS=12.3\(6\)
Cisco IOS=12.3b
Cisco IOS=12.3bc
Cisco IOS=12.3bw
Cisco IOS=12.3j
Cisco IOS=12.3ja
Cisco IOS=12.3t
Cisco IOS=12.3xa
Cisco IOS=12.3xb
Cisco IOS=12.3xc
Cisco IOS=12.3xd
Cisco IOS=12.3xe
Cisco IOS=12.3xf
Cisco IOS=12.3xg
Cisco IOS=12.3xh
Cisco IOS=12.3xi
Cisco IOS=12.3xj
Cisco IOS=12.3xk
Cisco IOS=12.3xl
Cisco IOS=12.3xm
Cisco IOS=12.3xn
Cisco IOS=12.3xq
Cisco IOS=12.3xr
Cisco IOS=12.3xs
Cisco IOS=12.3xt
Cisco IOS=12.3xu
Cisco IOS=12.3xv
Cisco IOS=12.3xw
Cisco IOS=12.3xx
Cisco IOS=12.3xy
Cisco IOS=12.3xz
Cisco IOS=12.3ya
Cisco IOS=12.3yc
Cisco IOS=12.3yd
Cisco IOS=12.3ye
Cisco IOS=12.3yf
Cisco IOS=12.3yg
Cisco IOS=12.3yh
Cisco IOS=12.3yj
Cisco IOS=12.3yl
Remediation
Patch Available
Event History
Apr 9, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1020?
CVE-2005-1020 is classified as a high severity vulnerability that allows attackers to cause a denial of service on affected Cisco IOS devices.
2
How do I fix CVE-2005-1020?
To fix CVE-2005-1020, upgrade to a Cisco IOS version that addresses this vulnerability as outlined in Cisco's security advisories.
3
What versions of Cisco IOS are affected by CVE-2005-1020?
CVE-2005-1020 affects Cisco IOS versions 12.0 through 12.3, including specific releases such as 12.1xg, 12.0xc, and 12.3xr.
4
What type of attack is possible with CVE-2005-1020?
CVE-2005-1020 allows a remote attacker to trigger a denial of service, leading to a device reload.
5
Is there a workaround for CVE-2005-1020?
While upgrading the IOS is the primary mitigation, restricting SSH access may provide a temporary workaround for CVE-2005-1020.