Detections
Analytics
Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow
high Nessus Plugin ID 48988
Language:
Synopsis
The remote device is missing a vendor-supplied security patchDescription
The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition.Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Telnet Services are not affected.
Devices configured with only Authentication Proxy for HTTP and/or HTTPS are not affected.
Only devices running certain versions of Cisco IOS are affected.
Cisco has made free software available to address this vulnerability.
There are workarounds available to mitigate the effects of the vulnerability.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20050907-auth_proxy.See Also
Plugin Details
Severity: High
ID: 48988
File Name: cisco-sa-20050907-auth.nasl
Version: 1.18
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/7/2005
Vulnerability Publication Date: 9/7/2005
Reference Information
CVE: CVE-2005-2841
BID: 14770