Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1095
cisco
vpn
concentrator
denial of service
pptp
windows-based
cve-2002-1095
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.0%
Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the “No Encryption” option set.
Affected configurations
Node
ciscovpn_3000_concentrator_series_softwareMatch2.0
ORciscovpn_3000_concentrator_series_softwareMatch2.5.2.a
ORciscovpn_3000_concentrator_series_softwareMatch2.5.2.b
ORciscovpn_3000_concentrator_series_softwareMatch2.5.2.c
ORciscovpn_3000_concentrator_series_softwareMatch2.5.2.d
ciscosecure_access_control_serverMatch2.6.3windows_nt
ORciscovpn_3002_hardware_client
Related
cvelist
cvelist
CVE-2002-1095
2004-09-01 04:00:00
nvd
nvd
CVE-2002-1095
2002-10-04 04:00:00
nessus
nessus
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.0%
Related for CVE-2002-1095