CVE-2005-3427 Security feature bypass in n/a
Cisco IPS Management Center may omit port fields, disabling signatures and allowing attackers to evade intrusion detection systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-3427?
CVE-2005-3427 is a low-severity vulnerability in n/a, published on 2 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.
Which versions are affected by CVE-2005-3427?
It affects 1 product.
Products include Cisco Ciscoworks Management Center for Ips Sensors.
How do I fix CVE-2005-3427?
No fix has been published for CVE-2005-3427 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-3427 being exploited?
There is no known exploitation of CVE-2005-3427 in the wild and no public exploit code.
Sources
Also known as GHSA-j82q-mm7f-vxwx.