Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2002-1099
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
0
Attacker Value
Unknown
CVE-2002-1100
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.
0
Attacker Value
Unknown
CVE-2002-1098
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
0
Attacker Value
Unknown
CVE-2002-1101
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
0
Attacker Value
Unknown
CVE-2002-1102
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection.
0
