Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577)

According to its banner, the remote VPN concentrator gives out too much information in application layer banners. This vulnerability is documented as Cisco bug ID CSCdu35577. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

CVE-2002-1094

Cisco VPN 3000 Series Concentrator Information Disclosure (CVE-2002-1094) affects 2.x.x and 3.x.x firmware up to but not including 3.5.4. The vulnerability leaks potentially sensitive information via banners in SSH, FTP, or an incorrect HTTP request, allowing remote information disclosure without...

CVE-2001-1094

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version...

CVE-2001-1094

CVE-2001-1094 affects NetOp School 1.5. Local users can bypass access restrictions on the administration version by first logging into the student version, closing it, and then starting the administration version. The provided sources describe the bypass but do not include exploit code, affected ...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-2001-1094

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version...