Vulnerabilities > Cisco > IOS > 12.3xw

DATE CVE VULNERABILITY TITLE RISK
2005-08-03 CVE-2005-2451 Unspecified vulnerability in Cisco IOS and IOS XR
Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.
local
low complexity
cisco
2.1
2005-07-05 CVE-2005-2105 Security Bypass vulnerability in IOS
Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.
network
low complexity
cisco
7.5
2005-05-02 CVE-2005-1021 Resource Management Errors vulnerability in Cisco IOS
Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
network
cisco CWE-399
7.1
2005-05-02 CVE-2005-1020 Improper Authentication vulnerability in Cisco IOS
Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
network
cisco CWE-287
7.1
2005-05-02 CVE-2005-0195 Unspecified vulnerability in Cisco IOS
Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.
network
low complexity
cisco
5.0