Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2005-4499
Disclosure Date: December 22, 2005 (last updated February 22, 2025)
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
0
Attacker Value
Unknown
CVE-2005-0943
Disclosure Date: March 30, 2005 (last updated February 22, 2025)
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
0
Attacker Value
Unknown
CVE-2003-0260
Disclosure Date: May 27, 2003 (last updated February 22, 2025)
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
0
Attacker Value
Unknown
CVE-2003-0258
Disclosure Date: May 27, 2003 (last updated February 22, 2025)
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
0
Attacker Value
Unknown
CVE-2003-0259
Disclosure Date: May 27, 2003 (last updated February 22, 2025)
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
0
Attacker Value
Unknown
CVE-2002-1096
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.
0
Attacker Value
Unknown
CVE-2002-1097
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
0
Attacker Value
Unknown
CVE-2002-1103
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.
0
Attacker Value
Unknown
CVE-2002-1094
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
0
Attacker Value
Unknown
CVE-2002-1099
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
0
