CVE-2005-4499

CVE-2005-4499 describes a vulnerability in Cisco PIX and VPN 3000 concentrators utilizing the Downloadable RADIUS ACLs feature with Cisco Secure Access Control Server (CS ACS). The system generates a random internal ACL name that also serves as a hidden username and password. This allows remote attackers to gain privileges by sniffing the cleartext portion of a RADIUS session to extract the username, then using the associated password to log into another device authenticated by CS ACS. The vulnerability has a CVSS score of 7.5 (High), indicating a critical severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.