VAR-200505-0778

Vulnerability from variot - Updated: 2022-05-06 22:35

Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data. Multiple Cisco networking products contain a denial-of-service vulnerability. There is an information integrity vulnerability in the SSH1 protocol that allows packets encrypted with a block cipher to be modified without notice. There is a remote integer overflow vulnerability in several implementations of the SSH1 protocol that allows an attacker to execute arbitrary code with the privileges of the SSH daemon, typically root. The program pgp4pine version 1.75.6 fails to properly identify expired keys when working with the Gnu Privacy Guard program (GnuPG). This failure may result in the clear-text transmission of senstive information when used with the PINE mail reading package. The SEDUM web server permits intruders to access files outside the web root. While addressing vulnerabilities described in http://www.cisco.com/warp/public/707/SSH-multiple-pub.html, a denial of service condition has been inadvertently introduced into firmware upgrades. Firmware for routers and switches (IOS), Catalyst 6000 switches running CatOS, Cisco PIX Firewall and Cisco 11000 Content Service Switch devices may be vulnerable. Cisco has reported that scanning for SSH vulnerabilities on affected devices will cause excessive CPU consumption. The condition is due to a failure of the Cisco SSH implementation to properly process large SSH packets. Repeated and concurrent attacks may result in a denial of device service. As many of these devices are critical infrastructure components, more serious network outages may occur. Cisco has released upgrades that will eliminate this vulnerability

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200505-0778",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": null,
        "scope": null,
        "trust": 3.2,
        "vendor": "ssh security",
        "version": null
      },
      {
        "model": "catalyst csx",
        "scope": "eq",
        "trust": 2.4,
        "vendor": "cisco",
        "version": "60005.3"
      },
      {
        "model": null,
        "scope": null,
        "trust": 1.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 1.6,
        "vendor": "openssh",
        "version": null
      },
      {
        "model": "ios 12.1 ex",
        "scope": null,
        "trust": 1.2,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "storedge 6130 arrays",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "sun",
        "version": "*"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "cisco",
        "version": "60006.1"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "cisco",
        "version": "60005.5"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sun microsystems",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "core sdi",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "debian",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "smoothwall",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "suse",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "holger lamm",
        "version": null
      },
      {
        "model": "storedge 6130 arrays",
        "scope": null,
        "trust": 0.6,
        "vendor": "sun",
        "version": null
      },
      {
        "model": "pix firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "6.2"
      },
      {
        "model": "pix firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "6.1"
      },
      {
        "model": "pix firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "6.0"
      },
      {
        "model": "pix firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "5.3"
      },
      {
        "model": "pix firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "5.2"
      },
      {
        "model": "ios 12.2yh",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2yg",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2yf",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2yd",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2yc",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2yb",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2ya",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xw",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xt",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xs",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xr",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xq",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xn",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xm",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xl",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xk",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xj",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xi",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xh",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xg",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xf",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xe",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xd",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xb",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2xa",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2t",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2s",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2dd",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2da",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2bc",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.2b",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "12.2"
      },
      {
        "model": "ios 12.1yi",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1yf",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1ye",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1yd",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1yc",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1yb",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xu",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xt",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xq",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xp",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xm",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xl",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xj",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xi",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xh",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xg",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xf",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xc",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1xb",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1t",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1ec",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.1e",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "12.0xv"
      },
      {
        "model": "ios 12.0xm",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.0xb",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.0st",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.0sp",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios 12.0s",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "css11000 content services switch",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60007.1(2)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60007.1"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.3(4)"
      },
      {
        "model": "catalyst pan",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.3"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.2(0.111)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.2(0.110)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.1(2.13)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60006.1(1)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.5(4)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.5(3)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.5(2)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.5(13)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.5(1)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4.1"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4(4)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4(3)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4(2)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4(1)"
      },
      {
        "model": "catalyst",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "60005.4"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "BID",
        "id": "5114"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:h:sun:storedge_6130_arrays:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "This issue was reported by Sun.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2005-1609",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2005-1609",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": true,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2005-1609",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#290140",
            "trust": 0.8,
            "value": "21.09"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#13877",
            "trust": 0.8,
            "value": "6.84"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#812438",
            "trust": 0.8,
            "value": "5.67"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#25309",
            "trust": 0.8,
            "value": "0.39"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#945216",
            "trust": 0.8,
            "value": "99.00"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#566640",
            "trust": 0.8,
            "value": "0.68"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#651994",
            "trust": 0.8,
            "value": "1.50"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#315308",
            "trust": 0.8,
            "value": "2.06"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200505-1066",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data. Multiple Cisco networking products contain a denial-of-service vulnerability. There is an information integrity vulnerability in the SSH1 protocol that allows packets encrypted with a block cipher to be modified without notice. There is a remote integer overflow vulnerability in several implementations of the SSH1 protocol that allows an attacker to execute arbitrary code with the privileges of the SSH daemon, typically root. The program pgp4pine version 1.75.6 fails to properly identify expired keys when working with the Gnu Privacy Guard program (GnuPG). This failure may result in the clear-text transmission of senstive information when used with the PINE mail reading package. The SEDUM web server permits intruders to access files outside the web root. While addressing vulnerabilities described in http://www.cisco.com/warp/public/707/SSH-multiple-pub.html, a denial of service condition has been inadvertently introduced into firmware upgrades.  Firmware for routers and switches (IOS), Catalyst 6000 switches running CatOS, Cisco PIX Firewall and Cisco 11000 Content Service Switch devices may be vulnerable. \nCisco has reported that scanning for SSH vulnerabilities on affected devices will cause excessive CPU consumption.  The condition is due to a failure of the Cisco SSH implementation to properly process large SSH packets. \nRepeated and concurrent attacks may result in a denial of device service.  As many of these devices are critical infrastructure components, more serious network outages may occur. \nCisco has released upgrades that will eliminate this vulnerability",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      },
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "BID",
        "id": "5114"
      }
    ],
    "trust": 6.93
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#13877",
        "trust": 3.2
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216",
        "trust": 2.4
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309",
        "trust": 2.4
      },
      {
        "db": "SECUNIA",
        "id": "15306",
        "trust": 2.4
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438",
        "trust": 2.4
      },
      {
        "db": "OSVDB",
        "id": "16325",
        "trust": 1.6
      },
      {
        "db": "BID",
        "id": "13566",
        "trust": 1.6
      },
      {
        "db": "SECTRACK",
        "id": "1013921",
        "trust": 1.6
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609",
        "trust": 1.6
      },
      {
        "db": "VUPEN",
        "id": "ADV-2005-0491",
        "trust": 1.6
      },
      {
        "db": "BID",
        "id": "5114",
        "trust": 1.1
      },
      {
        "db": "CERT/CC",
        "id": "VU#290140",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "6449",
        "trust": 0.8
      },
      {
        "db": "BID",
        "id": "2347",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "6083",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "6135",
        "trust": 0.8
      },
      {
        "db": "BID",
        "id": "2405",
        "trust": 0.8
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640",
        "trust": 0.8
      },
      {
        "db": "BID",
        "id": "2335",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "6063",
        "trust": 0.8
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "6472",
        "trust": 0.8
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308",
        "trust": 0.8
      },
      {
        "db": "XF",
        "id": "20542",
        "trust": 0.6
      },
      {
        "db": "XF",
        "id": "6130",
        "trust": 0.6
      },
      {
        "db": "SUNALERT",
        "id": "57771",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "BID",
        "id": "5114"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "id": "VAR-200505-0778",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.9323857391666667
  },
  "last_update_date": "2022-05-06T22:35:16.451000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.4,
        "url": "http://www.kb.cert.org/vuls/id/13877"
      },
      {
        "trust": 2.4,
        "url": "http://www.ssh.com/products/ssh/cert/"
      },
      {
        "trust": 1.6,
        "url": "http://www.cert.org/advisories/ca-2001-35.html"
      },
      {
        "trust": 1.6,
        "url": "http://www.kb.cert.org/vuls/id/945216"
      },
      {
        "trust": 1.6,
        "url": "http://www.kb.cert.org/vuls/id/25309"
      },
      {
        "trust": 1.6,
        "url": "http://www.kb.cert.org/vuls/id/812438"
      },
      {
        "trust": 1.6,
        "url": "http://www.securityfocus.com/bid/13566"
      },
      {
        "trust": 1.6,
        "url": "http://www.osvdb.org/16325"
      },
      {
        "trust": 1.6,
        "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57771-1"
      },
      {
        "trust": 1.6,
        "url": "http://securitytracker.com/id?1013921"
      },
      {
        "trust": 1.6,
        "url": "http://secunia.com/advisories/15306"
      },
      {
        "trust": 1.1,
        "url": "http://www.cisco.com/warp/public/707/ssh-scanning.shtml"
      },
      {
        "trust": 1.0,
        "url": "http://www.vupen.com/english/advisories/2005/0491"
      },
      {
        "trust": 1.0,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20542"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/5114"
      },
      {
        "trust": 0.8,
        "url": "http://www.cisco.com/warp/public/707/ssh-multiple-pub.html"
      },
      {
        "trust": 0.8,
        "url": "http://www.corest.com/files/files/11/crc32.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://www1.corest.com/common/showdoc.php?idx=131\u0026idxseccion=10"
      },
      {
        "trust": 0.8,
        "url": "http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-57771-1"
      },
      {
        "trust": 0.8,
        "url": "http://secunia.com/advisories/15306/"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/static/6449.php"
      },
      {
        "trust": 0.8,
        "url": "http://razor.bindview.com/publish/advisories/adv_ssh1crc.html"
      },
      {
        "trust": 0.8,
        "url": "http://www1.corest.com/common/showdoc.php?idx=81\u0026idxsection=10#"
      },
      {
        "trust": 0.8,
        "url": "http://www.openssh.com/security.html"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/2347"
      },
      {
        "trust": 0.8,
        "url": "http://www.ssh.com/products/ssh/advisories/ssh1_crc-32.cfm"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/static/6083.php"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/alerts/advise100.php"
      },
      {
        "trust": 0.8,
        "url": "http://www.cryptnet.net/fcp/audit/pgp4pine/01.html"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/2405"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/static/6135.php"
      },
      {
        "trust": 0.8,
        "url": "http://devrandom.net/lists/archives/2001/2/bugtraq/0383.html"
      },
      {
        "trust": 0.8,
        "url": "http://security-archive.merton.ox.ac.uk/bugtraq-200102/0389.html"
      },
      {
        "trust": 0.8,
        "url": "http://pgp4pine.flatline.de/"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/2335"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/static/6063.php"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/archive/1/160452"
      },
      {
        "trust": 0.8,
        "url": "http://xforce.iss.net/static/6472.php"
      },
      {
        "trust": 0.6,
        "url": "http://xforce.iss.net/xforce/xfdb/20542"
      },
      {
        "trust": 0.6,
        "url": "http://www.frsirt.com/english/advisories/2005/0491"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "BID",
        "id": "5114"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "db": "BID",
        "id": "5114"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2002-06-27T00:00:00",
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "date": "2001-11-07T00:00:00",
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "date": "2005-05-11T00:00:00",
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "date": "2000-09-26T00:00:00",
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "date": "2001-10-24T00:00:00",
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "date": "2001-07-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "date": "2001-05-16T00:00:00",
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "date": "2001-01-18T00:00:00",
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "date": "2002-06-27T00:00:00",
        "db": "BID",
        "id": "5114"
      },
      {
        "date": "2005-05-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "date": "2005-05-16T04:00:00",
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2002-12-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#290140"
      },
      {
        "date": "2003-05-20T00:00:00",
        "db": "CERT/CC",
        "id": "VU#13877"
      },
      {
        "date": "2005-05-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#812438"
      },
      {
        "date": "2002-03-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#25309"
      },
      {
        "date": "2003-05-20T00:00:00",
        "db": "CERT/CC",
        "id": "VU#945216"
      },
      {
        "date": "2002-01-15T00:00:00",
        "db": "CERT/CC",
        "id": "VU#566640"
      },
      {
        "date": "2001-06-26T00:00:00",
        "db": "CERT/CC",
        "id": "VU#651994"
      },
      {
        "date": "2002-03-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#315308"
      },
      {
        "date": "2002-06-27T00:00:00",
        "db": "BID",
        "id": "5114"
      },
      {
        "date": "2005-10-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      },
      {
        "date": "2017-07-11T01:32:00",
        "db": "NVD",
        "id": "CVE-2005-1609"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Multiple Cisco products consume excessive CPU resources in response to large SSH packets",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#290140"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200505-1066"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…