CVE-2005-4499: High severity Cisco Vpn 3001 Concentrator vulnerability

Published Dec 22, 2005
·
Updated

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.

Affected Software

312 affected components
Cisco Vpn 3001 Concentrator
Cisco Vpn 3015 Concentrator
Cisco Vpn 3020 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco Vpn 3000 Concentrator Series Software=3.6.7.a
Cisco Vpn 3000 Concentrator Series Software=3.6.7.b
Cisco Vpn 3000 Concentrator Series Software=3.6.7.c
Cisco Vpn 3000 Concentrator Series Software=3.6.7.d
Cisco Vpn 3000 Concentrator Series Software=3.6.7.f
Cisco Vpn 3000 Concentrator Series Software=3.6.7d
Cisco Vpn 3000 Concentrator Series Software=4.0
Cisco Vpn 3000 Concentrator Series Software=4.0.1
Cisco Vpn 3000 Concentrator Series Software=4.0.2
Cisco Vpn 3000 Concentrator Series Software=4.0.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.a
Cisco Vpn 3000 Concentrator Series Software=4.1.7.b
Cisco Vpn 3000 Concentrator Series Software=4.7.1
Cisco Vpn 3000 Concentrator Series Software=4.7.1.f
Cisco Vpn 3005 Concentrator Software=4.0.1
Cisco Vpn 3030 Concentator=4.7.1
Cisco Vpn 3030 Concentator=4.7.1.f
Cisco Pix Asa Ids
Cisco PIX firewall=6.2.2_.111
Cisco PIX firewall=6.2.3_\(110\)
Cisco PIX firewall=6.3.3_\(133\)
Cisco Secure Access Control Server
Cisco Secure Access Control Server=2.0
Cisco Secure Access Control Server=2.1
Cisco Secure Access Control Server=2.3
Cisco Secure Access Control Server=2.3
Cisco Secure Access Control Server=2.3.5.1
Cisco Secure Access Control Server=2.3.6.1
Cisco Secure Access Control Server=2.4
Cisco Secure Access Control Server=2.5
Cisco Secure Access Control Server=2.6
Cisco Secure Access Control Server=2.6.2
Cisco Secure Access Control Server=2.6.3
Cisco Secure Access Control Server=2.6.4
Cisco Secure Access Control Server=2.42
Cisco Secure Access Control Server=3.0
Cisco Secure Access Control Server=3.0
Cisco Secure Access Control Server=3.0.1
Cisco Secure Access Control Server=3.0.3
Cisco Secure Access Control Server=3.1
Cisco Secure Access Control Server=3.1.1
Cisco Secure Access Control Server=3.2
Cisco Secure Access Control Server=3.2
Cisco Secure Access Control Server=3.2\(1\)
Cisco Secure Access Control Server=3.2\(1.20\)
Cisco Secure Access Control Server=3.2\(2\)
Cisco Secure Access Control Server=3.2\(3\)
Cisco Secure Access Control Server=3.2.1
Cisco Secure Access Control Server=3.2.2
Cisco Secure Access Control Server=3.3
Cisco Secure Access Control Server=3.3\(1\)
Cisco Secure Access Control Server=3.3.1
Cisco Secure Access Control Server=3.3.2
Cisco VPN 3002 Hardware Client
Cisco Pix Firewall 501
Cisco Pix Firewall 506
Cisco PIX Firewall 515
Cisco Pix Firewall 515e
Cisco Pix Firewall 520
Cisco Pix Firewall 525
Cisco Pix Firewall 535
Cisco PIX firewall
Cisco PIX firewall=6.1.5\(104\)
Cisco Pix Firewall Software=2.7
Cisco Pix Firewall Software=3.0
Cisco Pix Firewall Software=3.1
Cisco Pix Firewall Software=4.0
Cisco Pix Firewall Software=4.1\(6\)
Cisco Pix Firewall Software=4.1\(6b\)
Cisco Pix Firewall Software=4.2
Cisco Pix Firewall Software=4.2\(1\)
Cisco Pix Firewall Software=4.2\(2\)
Cisco Pix Firewall Software=4.2\(5\)
Cisco Pix Firewall Software=4.3
Cisco Pix Firewall Software=4.4
Cisco Pix Firewall Software=4.4\(4\)
Cisco Pix Firewall Software=4.4\(7.202\)
Cisco Pix Firewall Software=4.4\(8\)
Cisco Pix Firewall Software=5.0
Cisco Pix Firewall Software=5.1
Cisco Pix Firewall Software=5.1\(4\)
Cisco Pix Firewall Software=5.1\(4.206\)
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=5.2\(3.210\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=5.2\(9\)
Cisco Pix Firewall Software=5.3
Cisco Pix Firewall Software=5.3\(1\)
Cisco Pix Firewall Software=5.3\(1.200\)
Cisco Pix Firewall Software=5.3\(2\)
Cisco Pix Firewall Software=5.3\(3\)
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)
Cisco Pix Firewall Software=6.3\(5\)
All of the following
Any of the following
Cisco Vpn 3001 Concentrator
Cisco Vpn 3015 Concentrator
Cisco Vpn 3020 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco Vpn 3000 Concentrator Series Software=3.6.7.a
Cisco Vpn 3000 Concentrator Series Software=3.6.7.b
Cisco Vpn 3000 Concentrator Series Software=3.6.7.c
Cisco Vpn 3000 Concentrator Series Software=3.6.7.d
Cisco Vpn 3000 Concentrator Series Software=3.6.7.f
Cisco Vpn 3000 Concentrator Series Software=3.6.7d
Cisco Vpn 3000 Concentrator Series Software=4.0
Cisco Vpn 3000 Concentrator Series Software=4.0.1
Cisco Vpn 3000 Concentrator Series Software=4.0.2
Cisco Vpn 3000 Concentrator Series Software=4.0.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.5.b
Cisco Vpn 3000 Concentrator Series Software=4.1.7.a
Cisco Vpn 3000 Concentrator Series Software=4.1.7.b
Cisco Vpn 3000 Concentrator Series Software=4.7.1
Cisco Vpn 3000 Concentrator Series Software=4.7.1.f
Cisco Vpn 3005 Concentrator Software=4.0.1
Cisco Vpn 3030 Concentator=4.7.1
Cisco Vpn 3030 Concentator=4.7.1.f
Any of the following
Cisco Pix Asa Ids
Cisco PIX firewall=6.2.2_.111
Cisco PIX firewall=6.2.3_\(110\)
Cisco PIX firewall=6.3.3_\(133\)
Cisco Secure Access Control Server
Cisco Secure Access Control Server=2.0
Cisco Secure Access Control Server=2.1
Cisco Secure Access Control Server=2.3
Cisco Secure Access Control Server=2.3
Cisco Secure Access Control Server=2.3.5.1
Cisco Secure Access Control Server=2.3.6.1
Cisco Secure Access Control Server=2.4
Cisco Secure Access Control Server=2.5
Cisco Secure Access Control Server=2.6
Cisco Secure Access Control Server=2.6.2
Cisco Secure Access Control Server=2.6.3
Cisco Secure Access Control Server=2.6.4
Cisco Secure Access Control Server=2.42
Cisco Secure Access Control Server=3.0
Cisco Secure Access Control Server=3.0
Cisco Secure Access Control Server=3.0.1
Cisco Secure Access Control Server=3.0.3
Cisco Secure Access Control Server=3.1
Cisco Secure Access Control Server=3.1.1
Cisco Secure Access Control Server=3.2
Cisco Secure Access Control Server=3.2
Cisco Secure Access Control Server=3.2\(1\)
Cisco Secure Access Control Server=3.2\(1.20\)
Cisco Secure Access Control Server=3.2\(2\)
Cisco Secure Access Control Server=3.2\(3\)
Cisco Secure Access Control Server=3.2.1
Cisco Secure Access Control Server=3.2.2
Cisco Secure Access Control Server=3.3
Cisco Secure Access Control Server=3.3\(1\)
Cisco Secure Access Control Server=3.3.1
Cisco Secure Access Control Server=3.3.2
Cisco VPN 3002 Hardware Client
Cisco Pix Firewall 501
Cisco Pix Firewall 506
Cisco PIX Firewall 515
Cisco Pix Firewall 515e
Cisco Pix Firewall 520
Cisco Pix Firewall 525
Cisco Pix Firewall 535
Cisco PIX firewall
Cisco Pix Firewall Software=2.7
Cisco Pix Firewall Software=3.0
Cisco Pix Firewall Software=3.1
Cisco Pix Firewall Software=4.0
Cisco Pix Firewall Software=4.1\(6\)
Cisco Pix Firewall Software=4.1\(6b\)
Cisco Pix Firewall Software=4.2
Cisco Pix Firewall Software=4.2\(1\)
Cisco Pix Firewall Software=4.2\(2\)
Cisco Pix Firewall Software=4.2\(5\)
Cisco Pix Firewall Software=4.3
Cisco Pix Firewall Software=4.4
Cisco Pix Firewall Software=4.4\(4\)
Cisco Pix Firewall Software=4.4\(7.202\)
Cisco Pix Firewall Software=4.4\(8\)
Cisco Pix Firewall Software=5.0
Cisco Pix Firewall Software=5.1
Cisco Pix Firewall Software=5.1\(4\)
Cisco Pix Firewall Software=5.1\(4.206\)
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=5.2\(3.210\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=5.2\(9\)
Cisco Pix Firewall Software=5.3
Cisco Pix Firewall Software=5.3\(1\)
Cisco Pix Firewall Software=5.3\(1.200\)
Cisco Pix Firewall Software=5.3\(2\)
Cisco Pix Firewall Software=5.3\(3\)
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.1.5\(104\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)
Cisco Pix Firewall Software=6.3\(5\)

Event History

Dec 22, 2005
CVE Published
11:03 AM
Data Sourced
11:03 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2005-4499?

CVE-2005-4499 is considered to have a high severity as it allows remote attackers to gain administrative privileges on affected Cisco devices.

2

How do I fix CVE-2005-4499?

To fix CVE-2005-4499, you should upgrade to the latest recommended software versions provided by Cisco for your specific device.

3

Which Cisco products are affected by CVE-2005-4499?

Affected products include various models of Cisco PIX firewalls and the VPN 3000 series concentrators.

4

What risks does CVE-2005-4499 pose to organizations?

CVE-2005-4499 poses risks of unauthorized access, allowing attackers to manipulate or control sensitive network configurations.

5

When was CVE-2005-4499 first published?

CVE-2005-4499 was first published on December 20, 2005.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203