CVE-2005-0598

CVE-2005-0598 is a medium-severity vulnerability in Cisco Application And Content Networking Software with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 3% (88th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Cisco Application And Content Networking Software
• Published: 2005-02-24
• Last modified: 2026-06-16

Description

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.

Frequently asked questions

What is CVE-2005-0598?

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.

How severe is CVE-2005-0598?

CVE-2005-0598 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2005-0598 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (88th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-0598?

CVE-2005-0598 primarily affects Cisco Application And Content Networking Software. In total, 53 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-0598?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-0598 published?

CVE-2005-0598 was published on 2005-02-24 and last updated on 2026-06-16.

References

• http://secunia.com/advisories/14395
• http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml
• http://www.kb.cert.org/vuls/id/579240
• http://www.securityfocus.com/bid/12648
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19469

Affected products (53)

• cpe:2.3:a:cisco:application_and_content_networking_software:\(acns\):*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:4.2.11:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:5.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:application_and_content_networking_software:5.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_delivery_manager:4630:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_delivery_manager:4650:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:510:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:565:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*
• cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*

More vulnerabilities in Cisco Application And Content Networking Software

• CVE-2005-0601 — High (CVSS 7.5): Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password…
• CVE-2004-0079 — High (CVSS 7.5): The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause…
• CVE-2003-0982 — High (CVSS 7.5): Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote…
• CVE-2005-4794 — Medium (CVSS 5.0): Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows…
• CVE-2005-0599 — Medium (CVSS 5.0): Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote…
• CVE-2005-0597 — Medium (CVSS 5.0): Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6…

All CVEs affecting Cisco Application And Content Networking Software →