CVE-2005-1021 - CVE House
Back to Database
Status published High CVE-2005-1021

Memory leak in Secure Shell (SSH) in Cisco IOS 12.0...

Vulnerability Description

Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1021

Credits & Attribution

No credits recorded in the NVD database.

References

More from cisco

View All →
CVE-2025-27091
OpenH264 Decoding Functions Heap Overflow Vulnerability
High 8.6
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
High 7.5
CVE-2021-33478
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow...
Medium 6.8
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0...
High 7.5
CVE-2020-16138
A denial-of-service issue in Cisco Unified IP Conference Station 7937G...
High 7.5

Affected Vendor

Affected Software

ios
Vulnerable Versions:
12.0s, 12.0sx, 12.1ax, 12.1az, 12.1db, 12.1dc, 12.1e, 12.1ea, 12.1eb, 12.1ec, 12.1eu, 12.1ew, 12.1ex, 12.1t, 12.1xd, 12.1xe, 12.1xf, 12.1xg, 12.1xh, 12.1xi, 12.1xl, 12.1xm, 12.1xp, 12.1xq, 12.1xr, 12.1xt, 12.1xu, 12.1xv, 12.1ya, 12.1yb, 12.1yc, 12.1yd, 12.1ye, 12.1yf, 12.1yh, 12.1yi, 12.2, 12.2b, 12.2dd, 12.2dx, 12.2eu, 12.2ew, 12.2ewa, 12.2ex, 12.2s, 12.2se, 12.2sea, 12.2seb, 12.2su, 12.2sv, 12.2sx, 12.2sxa, 12.2sxb, 12.2sxd, 12.2sy, 12.2sz, 12.2t, 12.2xa, 12.2xc, 12.2xf, 12.2xn, 12.2xs, 12.2ye, 12.2yk, 12.2yo, 12.2yx, 12.2yz, 12.2za, 12.3t, 12.3xd, 12.3xe, 12.3xf, 12.3xg, 12.3xh, 12.3xi, 12.3xj, 12.3xk, 12.3xl, 12.3xm, 12.3xq, 12.3xr, 12.3xs, 12.3xu, 12.3xw, 12.3xx, 12.3xy, 12.3ya, 12.3yd, 12.3yf, 12.3yg, 12.3yh, 12.3yj, 12.3yk

Timeline

Official Publish: April 9th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.