Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2005-2280

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Security Agent(CSA)是美国思科是的一套用于为服务器和桌面计算系统提供安全防护的网络安全代理软件。 CSA 4.5中存在拒绝服务漏洞。 由于处理畸形IP报文时存在漏洞,远程攻击者可通过发送特别构造的IP包,导致系统崩溃,造成拒绝服务。

AI Predicted 7.5 Difficulty: Easy EPSS 1.26% · P67
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-2280

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco SecurityAgnet 畸形IP报文 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Security Agent(CSA)是美国思科是的一套用于为服务器和桌面计算系统提供安全防护的网络安全代理软件。 CSA 4.5中存在拒绝服务漏洞。 由于处理畸形IP报文时存在漏洞,远程攻击者可通过发送特别构造的IP包,导致系统崩溃,造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-2280

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2280

登录查看更多情报信息。

Vendor Advisories for CVE-2005-2280 (1)

Same Patch Batch · n/a · 2005-07-17 · 68 CVEs total

CVE-2004-2256 phpMyFAQ Lang参数远程目录遍历漏洞
CVE-2005-2291 Oracle Jdeveloper 信息泄露漏洞
CVE-2005-2292 Oracle Jdeveloper 信息泄露漏洞
CVE-2005-2290 WPS WebPortalSystem wps_shop.cgi 命令执行漏洞
CVE-2005-2278 MailEnable Professional IMAP4 缓冲区溢出漏洞
CVE-2005-2195 Apple Darwin Streaming Server 拒绝服务漏洞
CVE-2005-1914 CenterICQ symlink 文件覆盖漏洞
CVE-2005-1689 MIT krb krb5_recvauth() 代码执行漏洞
CVE-2005-1175 MIT krb5 KDC 堆溢出漏洞
CVE-2004-2257 phpMyFAQ图像管理认证绕过漏洞
CVE-2005-2279 Cisco ONS 15216 OADM telnet 拒绝服务漏洞
CVE-2004-2255 phpMyFAQ Action参数任意文件泄露漏洞
CVE-2004-2254 SurgeLDAP Web管理验证绕过漏洞
CVE-2004-2253 SurgeLDAP user.cgi远程目录遍历漏洞
CVE-2004-2252 Astaro Security Linux信息泄露漏洞
CVE-2004-2251 Astaro Security Linux漏洞
CVE-2004-2250 RemoteEditor未知的影响和攻击向量且绕过IP地址限制漏洞
CVE-2004-2249 SecureEditor限制绕过漏洞
CVE-2004-2248 RemoteEditor未知漏洞
CVE-2004-2247 AudienceConnect "admin of paypal email addresses"未知漏洞

Showing top 20 of 68 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2005-2280

No comments yet


Leave a comment