« Volver al listado

CVE-2005-4794

Estado: ModificadaMedia (5)—

Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Cisco — Application AND Content Networking SoftwareCisco — ATACisco — IP Phone 7902Cisco — IP Phone 7905Cisco — IP Phone 7912Cisco — Subscriber Edge Services ManagerCisco — Unity Express

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-4794",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/15472",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1014043",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1014044",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1014045",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1014046",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015975",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/19003",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/13729",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20712",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/15472",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1014043",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1014044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1014045",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1014046",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015975",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sn-20050524-dns.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/19003",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/13729",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20712",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset."
    }
  ],
  "lastModified": "2026-06-16T22:19:27.843",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E383F2A-DFCF-47F8-94EE-3563D41EA597"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ata:186:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BA52BDC-36B9-4C2F-BED4-D6809563C3AF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:ata:188:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD6F84BF-48ED-41F1-B237-FF58F4491925"
            },
            {
              "criteria": "cpe:2.3:a:cisco:subscriber_edge_services_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E86726D1-256E-4F9D-8D3A-DD1F1BD2E165"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7902:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0143975A-5D7B-46F9-8529-D5E3485CF2FD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7905:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "460D3CD8-DCBB-41A5-98C4-EE66700DDCE0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ip_phone_7912:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B31D194B-75A0-4F4F-8738-D4DC06047F02"
            },
            {
              "criteria": "cpe:2.3:h:cisco:unity_express:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7583D706-3702-4571-BD2C-527E5337F6E1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Cisco has released advisory cisco-sn-20050524-dns to address this issue. Please see the referenced advisory for further information on obtaining fixes."
}