Unscored severity · published Dec 22, 2005
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance Software · Cisco
7.0; 7.0(4); 7.0.1.4; 7.0.4.3 · source: NVD
PA
Pix Asa Ids · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall · Cisco
6.2.2_.111; 6.2.3_(110); 6.3.3_(133) · source: NVD
PF
Pix Firewall 501 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 506 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515e · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 520 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 525 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 535 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall Software · Cisco
2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more · source: NVD
SA
Secure Access Control Server · Cisco
2.0; 2.1; 2.3; 2.3; 2.3.5.1; 2.3.6.1; +25 more · source: NVD
Affected product
AS
Adaptive Security Appliance Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4499
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4499
secunia.com
http://secunia.com/advisories/18141
www.cisco.com
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00805bf1c4.shtml
www.osvdb.org
http://www.osvdb.org/22193
www.securityfocus.com
http://www.securityfocus.com/archive/1/420020/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/420103/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/16025
More from Adaptive Security Appliance Software
9.9
CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
9.1
CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
8.8
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
8.6
CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
8.6
CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability