CVE-2005-1021: High severity Cisco IOS vulnerability
Published Apr 9, 2005
·Updated
Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
Affected Software
93 affected components
Cisco IOS=12.0s
Cisco IOS=12.0sx
Cisco IOS=12.1ax
Cisco IOS=12.1az
Cisco IOS=12.1db
Cisco IOS=12.1dc
Cisco IOS=12.1e
Cisco IOS=12.1ea
Cisco IOS=12.1eb
Cisco IOS=12.1ec
Cisco IOS=12.1eu
Cisco IOS=12.1ew
Cisco IOS=12.1ex
Cisco IOS=12.1t
Cisco IOS=12.1xd
Cisco IOS=12.1xe
Cisco IOS=12.1xf
Cisco IOS=12.1xg
Cisco IOS=12.1xh
Cisco IOS=12.1xi
Cisco IOS=12.1xl
Cisco IOS=12.1xm
Cisco IOS=12.1xp
Cisco IOS=12.1xq
Cisco IOS=12.1xr
Cisco IOS=12.1xt
Cisco IOS=12.1xu
Cisco IOS=12.1xv
Cisco IOS=12.1ya
Cisco IOS=12.1yb
Cisco IOS=12.1yc
Cisco IOS=12.1yd
Cisco IOS=12.1ye
Cisco IOS=12.1yf
Cisco IOS=12.1yh
Cisco IOS=12.1yi
Cisco IOS=12.2
Cisco IOS=12.2b
Cisco IOS=12.2dd
Cisco IOS=12.2dx
Cisco IOS=12.2eu
Cisco IOS=12.2ew
Cisco IOS=12.2ewa
Cisco IOS=12.2ex
Cisco IOS=12.2s
Cisco IOS=12.2se
Cisco IOS=12.2sea
Cisco IOS=12.2seb
Cisco IOS=12.2su
Cisco IOS=12.2sv
Cisco IOS=12.2sx
Cisco IOS=12.2sxa
Cisco IOS=12.2sxb
Cisco IOS=12.2sxd
Cisco IOS=12.2sy
Cisco IOS=12.2sz
Cisco IOS=12.2t
Cisco IOS=12.2xa
Cisco IOS=12.2xc
Cisco IOS=12.2xf
Cisco IOS=12.2xn
Cisco IOS=12.2xs
Cisco IOS=12.2ye
Cisco IOS=12.2yk
Cisco IOS=12.2yo
Cisco IOS=12.2yx
Cisco IOS=12.2yz
Cisco IOS=12.2za
Cisco IOS=12.3t
Cisco IOS=12.3xd
Cisco IOS=12.3xe
Cisco IOS=12.3xf
Cisco IOS=12.3xg
Cisco IOS=12.3xh
Cisco IOS=12.3xi
Cisco IOS=12.3xj
Cisco IOS=12.3xk
Cisco IOS=12.3xl
Cisco IOS=12.3xm
Cisco IOS=12.3xq
Cisco IOS=12.3xr
Cisco IOS=12.3xs
Cisco IOS=12.3xu
Cisco IOS=12.3xw
Cisco IOS=12.3xx
Cisco IOS=12.3xy
Cisco IOS=12.3ya
Cisco IOS=12.3yd
Cisco IOS=12.3yf
Cisco IOS=12.3yg
Cisco IOS=12.3yh
Cisco IOS=12.3yj
Cisco IOS=12.3yk
Remediation
Patch Available
Patch Available
Event History
Apr 9, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1021?
CVE-2005-1021 has a severity level that allows remote attackers to cause a denial of service through memory consumption.
2
How do I fix CVE-2005-1021?
To fix CVE-2005-1021, upgrade to a version of Cisco IOS that is not affected by this vulnerability, such as 12.4 or later.
3
Which versions of Cisco IOS are affected by CVE-2005-1021?
CVE-2005-1021 affects Cisco IOS versions 12.0 through 12.3.
4
What type of attack is made possible by CVE-2005-1021?
CVE-2005-1021 enables a denial of service attack due to a memory leak when authenticating against a TACACS+ server.
5
Can CVE-2005-1021 be exploited remotely?
Yes, CVE-2005-1021 can be exploited remotely by sending incorrect usernames or passwords.