CVE-2005-4825

MediumCVSS 5.7/10Last modified Jun 16, 2026

Description

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Metrics

CVSS 2.0 5.7/10AV:A/AC:M/Au:N/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtmlPatch, Vendor Advisory
http://www.osvdb.org/21959Vendor Advisory
http://www.securityfocus.com/archive/1/419645/30/0/threadedVendor Advisory
http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtmlPatch, Vendor Advisory
http://www.osvdb.org/21959Vendor Advisory
http://www.securityfocus.com/archive/1/419645/30/0/threadedVendor Advisory

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-48266.1Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote atta CVE-2005-48277.5Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outs CVE-2005-48286.4Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to CVE-2005-482910.0VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remo CVE-2005-48307.6CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response CVE-2005-48314.3viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which ca CVE-2005-48327.5SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with eleva CVE-2005-48334.3IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows re CVE-2005-48345.0IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive informa CVE-2005-48357.1The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial o CVE-2005-48367.8The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which all CVE-2005-483710.0snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allow