CVE-2005-2681

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/16545Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/14633
https://exchange.xforce.ibmcloud.com/vulnerabilities/21947
http://secunia.com/advisories/16545Patch, Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/14633
https://exchange.xforce.ibmcloud.com/vulnerabilities/21947

Timeline

Published: Aug 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-26827.5aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell CVE-2005-26837.5Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter CVE-2005-26847.5nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host paramete CVE-2005-26857.5SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then CVE-2005-26867.5Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP pr CVE-2005-26877.5PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path par CVE-2005-26884.3Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a CVE-2005-26892.6Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML vi CVE-2005-26907.5SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands CVE-2005-26917.5includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote att CVE-2005-26927.5Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addque CVE-2005-26934.6cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbi