Cisco VPN 3000 VPN Concentrator Denial of Service

HTTP traffic parsing DoS...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483

CVE-2006-0483 affects Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A. The vulnerability allows remote attackers to cause a denial of service (device reload or user disconnect) by sending a crafted HTTP packet. The incident is categorized with network access, no authent...

[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack Advisory ID: cisco-sa-20060126-vpn http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml Revision 1.0 For Public Release 2006 January 26 1700 UTC GMT...

CVE-2005-4499

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...

Cisco IPSec Unspecified IKE Traffic Denial Of Service Vulnerabilities

Description Various Cisco IOS, PIX Firewall, Firewall Services Module FWSM, VPN 3000 Series Concentrator, and MDS Series SanOS releases are prone to denial of service attacks. These issues are due to security flaws in Cisco's IPSec implementation. The vulnerabilities may be triggered by malformed...

CVE-2005-3000

CVE-2005-3000 affects PHP Advanced Transfer Manager 1.30, with XSS vulnerabilities in viewers/txt.php. The vulnerability allows remote attackers to inject arbitrary script/HTML via the font, normalfontcolor, or mess[31] parameters, potentially affecting users who load the affected page. Root caus...

Cisco VPN 3000 groupname enumeration

Different bahaviour for valid and invalid groupname in IKE aggressive mode...

Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack

...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL attack ================================================================= Revision 1.0 For Public Release...

CVE-2002-1102

The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to...

CVE-2002-1095

Cisco VPN 3000 Concentrator before 2.5.2F, with encryption enabled, allows remote attackers to cause a denial of service reload via a Windows-based PPTP client with the "No Encryption" option set...

CVE-2002-1098

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound XML-Autoforward/in" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator...

CVE-2002-1419

The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address...

Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation Revision 1.0 For Public Release 2004 August 31 1830 UTC GMT - ---------------------------------------------------------------------- Contents ======== Summary Affected Products...

Cisco VPN 3000 Concentrator vulnerable to DoS via large number of malformed ICMP packets

Overview A vulnerability in some Cisco Virtual Private Network VPN products could allow a remote attacker to cause a denial of service. Description The Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Clients are Virtual Private Network VPN platforms designed to provide secure...

CVE-2003-0259

The CVE-2003-0259 issue affects Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Client (2.x–3.6.7). A malformed SSH initialization packet during the initial SSH session setup could cause the device to reload, yielding a denial-of-service condition. CERT/CC and Cisco advisories...

CVE-2003-0258

CVE-2003-0258 affects Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (3.5.x–4.0.REL). When IPSec over TCP is enabled for a port on the concentrator, traffic forwarded on that port may be delivered to all hosts on the protected network, not only those using IPsec, enabling ...

CVE-2003-0260

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service slowdown and possibly reload via a flood of malformed ICMP packets...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities Revision 1.0 For Public Release 2003 May 7 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact...