CVE-2005-3426
CVE-2005-3426 is a medium-severity vulnerability in Cisco Content Services Switch 11500 with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (59th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Content Services Switch 11500
- Published:
- Last modified:
Description
Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.
Frequently asked questions
- What is CVE-2005-3426?
- Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.
- How severe is CVE-2005-3426?
- CVE-2005-3426 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2005-3426 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (59th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-3426?
- CVE-2005-3426 affects Cisco Content Services Switch 11500. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2005-3426?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-3426 published?
- CVE-2005-3426 was published on 2005-11-02 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/17260
- http://securityreason.com/securityalert/99
- http://securitytracker.com/id?1015081
- http://www.cisco.com/warp/public/707/cisco-sa-20051019-css.shtml
- http://www.securityfocus.com/bid/15144
Affected products (1)
- cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*
More vulnerabilities in Cisco Content Services Switch 11500
- CVE-2010-2629 — High (CVSS 7.5): The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710…
- CVE-2010-1576 — High (CVSS 7.5): The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE)…
- CVE-2010-1575 — High (CVSS 7.5): The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-*…
- CVE-2004-0079 — High (CVSS 7.5): The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause…
- CVE-2006-1631 — Medium (CVSS 5.0): Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches…
- CVE-2005-0356 — Medium (CVSS 5.0): Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled…