CVE-2005-1057

Cisco IOS 12.2T, 12.3 and 12.3T - Unauthenticated Authentication Bypass via Malformed XAUTH Packet

Title source: llm
STIX 2.1

Description

Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml

Scores

EPSS 0.0144
EPSS Percentile 70.5%

Details

Status published
Products (3)
cisco/ios 12.2t
cisco/ios 12.3
cisco/ios 12.3t
Published May 02, 2005
Tracked Since Feb 18, 2026