CVE-2004-1464

MediumCVSS 5.9/10Known exploited (CISA KEV)Last modified Jun 16, 2026

Description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/12395/Broken Link, Vendor Advisory
http://securitytracker.com/id?1011079Broken Link, Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtmlNot Applicable, Vendor Advisory
http://www.kb.cert.org/vuls/id/384230Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11060Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17131Third Party Advisory, VDB Entry
http://secunia.com/advisories/12395/Broken Link, Vendor Advisory
http://securitytracker.com/id?1011079Broken Link, Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtmlNot Applicable, Vendor Advisory
http://www.kb.cert.org/vuls/id/384230Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11060Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17131Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464US Government Resource

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
Added to CISA KEV: May 19, 2023
NVD status: Analyzed

Related CVEs from 2004

CVE-2004-14653.7Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the comman CVE-2004-14667.5The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have bee CVE-2004-14674.3Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web scri CVE-2004-14687.5The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in a CVE-2004-14697.2Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code CVE-2004-14705.0CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting CVE-2004-14717.1Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commi CVE-2004-14725.0Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of serv CVE-2004-14735.0Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running CVE-2004-14745.0Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running CVE-2004-14755.1Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// CVE-2004-14765.1Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute