CVE-2005-4794

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.

Affected products

Cisco Application And Content Networking Software: all versions
Cisco Ata: 186, 188
Cisco Ip Phone 7902: all versions
Cisco Ip Phone 7905: all versions
Cisco Ip Phone 7912: all versions
Cisco Subscriber Edge Services Manager: all versions
Cisco Unity Express: all versions

References

http://secunia.com/advisories/15472
http://securitytracker.com/id?1014043
http://securitytracker.com/id?1014044
http://securitytracker.com/id?1014045
http://securitytracker.com/id?1014046
http://securitytracker.com/id?1015975
http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml
http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en
http://www.osvdb.org/19003
http://www.securityfocus.com/bid/13729
https://exchange.xforce.ibmcloud.com/vulnerabilities/20712

Get alerted when CVE-2005-4794 or the next vulnerability affects your stack