CVE-2005-3427
Last modified
CVE-2005-3427 is a vulnerability of currently unknown severity. The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ciscoworks Management Center For Ips Sensors | 2.1 |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtmlPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/154883US Government Resource
- http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtmlPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/154883US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3427?
How severe is CVE-2005-3427?
How do I fix CVE-2005-3427?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3421estcmd in Hyper Estraier 1.0.1 on Windows systems allows rem…
- CVE-2005-3422Cross-site scripting (XSS) vulnerability in error.asp in ASP…
- CVE-2005-3423Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 a…
- CVE-2005-3424Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…
- CVE-2005-3425Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…
- CVE-2005-3426Cisco CSS 11500 Content Services Switch (CSS) with SSL termi…
- CVE-2005-3428Cross-site scripting (XSS) vulnerability in Rockliffe MailSi…
- CVE-2005-3429Rockliffe MailSite Express before 6.1.22, with the option to…
- CVE-2005-3430Incomplete blacklist vulnerability in Rockliffe MailSite Exp…
- CVE-2005-3431Absolute path traversal vulnerability in Rockliffe MailSite …
- CVE-2005-3432MiniGal 2 (MG2) 0.5.1 allows remote attackers to list passwo…
- CVE-2005-3433Buffer overflow in Mirabilis ICQ 2003a allows user-assisted …
Are you affected by CVE-2005-3427?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
