● CVE
CVE-2005-4499
VendorciscoProductadaptive security appliance software, pix firewall, pix firewall software, secure access control server, pix firewall 515, pix firewall 520, vpn 3015 concentrator, vpn 3030 concentator, vpn 3060 concentrator, vpn 3080 concentrator, vpn 3000 concentrator series software, vpn 3002 hardware client, vpn 3005 concentrator software, vpn 3020 concentrator, pix asa ids, pix firewall 501, pix firewall 506, pix firewall 515e, pix firewall 525, pix firewall 535, vpn 3001 concentratorDiscoveredDec 22, 2005UpdatedApr 16, 2026
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.