Unscored severity · published Dec 15, 2005
CVE-2005-4258
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catalyst · Cisco
4.5_(10); sup2plus; sup3 · source: NVD
C1
Catalyst 1200 Series · Cisco
All versions, or not specified · source: NVD
C1
Catalyst 1900 Series · Cisco
9.0_0.07 · source: NVD
C2
Catalyst 2800 Series · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2820 · Cisco
9.0_0.07 · source: NVD
C2
Catalyst 2900 · Cisco
lre_xl; xl · source: NVD
C2
Catalyst 2901 · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2902 · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2920 · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2926 · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2926f · Cisco
All versions, or not specified · source: NVD
C2
Catalyst 2926gl · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4258
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4258
Exploit
http://www.securityfocus.com/bid/15864
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44543
More from Catalyst
–
CVE-2009-1166
The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100…
–
CVE-2005-1942
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages