CVE-2005-1058 | BDVDB-2026-9277 Detail

Description#

Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738
http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml

Exploit#

No public exploit known

History#

Version 12005-04-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.