CVE-2005-2841

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-09-08 · updated 2026-06-16

Description

Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials.

Affected products

Cisco IOS: 12.2zh, 12.2zl, 12.3, 12.3t, 12.4, 12.4t

References

http://www.cisco.com/warp/public/707/cisco-sa-20050907-auth_proxy.shtml
http://www.kb.cert.org/vuls/id/236045
http://www.vupen.com/english/advisories/2005/1669
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317
http://www.cisco.com/warp/public/707/cisco-sa-20050907-auth_proxy.shtml
http://www.kb.cert.org/vuls/id/236045
http://www.vupen.com/english/advisories/2005/1669
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5317

Get alerted when CVE-2005-2841 or the next vulnerability affects your stack