CVE-2005-1021
published 2005-05-02CVE-2005-1021: Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of…
PriorityP419high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.83%
76.4th percentile
Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
Affected
94 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Vulnerabilities in Cisco IOS Secure Shell Server
vendor_cisco·2005-04-06
CVE-2005-1020 CWE-399 Vulnerabilities in Cisco IOS Secure Shell Server
Vulnerabilities in Cisco IOS Secure Shell Server
Certain release trains of Cisco Internetwork Operating System
(IOS)®, when configured to use the IOS Secure Shell
(SSH) server in combination with Terminal Access Controller Access Control
System Plus (TACACS+) as a means to perform remote management tasks on IOS
devices, may contain two vulnerabilities that can potentially cause IOS devices
to exhaust resources and reload. Repeated exploitation of these vulnerabilities
can result in a Denial of Service (DoS) condition. Use of SSH with other
authentication methods like Remote Authentication Dial In User Service (RADIUS)
and the local user database may also be affected.
Cisco has made free software available to address these
vulnerabilities for all affected customers. There are workarounds
Cisco
Vulnerabilities in Cisco IOS Secure Shell Server
vendor_cisco
CVE-2005-1021 Vulnerabilities in Cisco IOS Secure Shell Server
CVE-2005-1021: Vulnerabilities in Cisco IOS Secure Shell Server
Certain release trains of Cisco Internetwork Operating System (IOS) � , when configured to use the IOS Secure Shell (SSH) server in combination with Terminal Access Controller Access Control System Plus (TACACS+) as a means to perform remote management tasks on IOS devices, may contain two vulnerabilities that can potentially cause IOS devices to exhaust resources and reload. Repeated exploitation of these vulnerabilities can result in a Denial of Service (DoS) condition. Use of SSH with other authentication methods like Remote Authentication Dial In User Service (RADIUS) and the local user database may also be affected. Cisco has made free software available to address these vulnerabilities for all affected customers. There a
GHSA
GHSA-phww-46gm-5fww: Memory leak in Secure Shell (SSH) in Cisco IOS 12
ghsa_unreviewed·2022-05-01
CVE-2005-1021 [HIGH] GHSA-phww-46gm-5fww: Memory leak in Secure Shell (SSH) in Cisco IOS 12
Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/14854http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtmlhttp://www.osvdb.org/15303http://www.securityfocus.com/bid/13042http://www.securitytracker.com/alerts/2005/Apr/1013655.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/19991https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687http://secunia.com/advisories/14854http://www.cisco.com/warp/public/707/cisco-sa-20050406-ssh.shtmlhttp://www.osvdb.org/15303http://www.securityfocus.com/bid/13042http://www.securitytracker.com/alerts/2005/Apr/1013655.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/19991https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5687
2005-05-02
Published