180 matches found
SEIL/B1 authentication issue
Overview SEIL/B1 contains an issue in the implementation of the PPP Access Concentrator PPPAC function, which may allow replay attacks to be performed during the authentication process. The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2...
Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access
This module tests for a logic vulnerability in the Cisco VPN Concentrator 3000 series. It is possible to execute some FTP statements without authentication CWD, RNFR, MKD, RMD, SIZE, CDUP. It also appears to have some memory leak bugs when working with CWD commands. This module simply creates an...
CVE-2007-5562
The CVE-2007-5562 issue affects Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 . The vulnerable component is the login page at cgi-bin/welcome , exploitable via the err parameter in the context of an error page to trigger Cross-site Scripting (XSS) . The provided description indicates remote atta...
Cisco VPN Concentrator Administrative Interface Detection
Binary data 3913.prm...
Cisco VPN 3000 Concentrator FTP任意文件访问漏洞
Cisco VPN 3000 Concentrator是一款VPN网络通信解决方案。 Cisco VPN 3000 Concentrator通过FTP进行文件管理时存在问题，远程攻击者可以利用漏洞以FTP服务进程上下文访问任意文件。 Cisco VPN 3000系列可配置使用FTP协议管理存储在集中器上的文件，如配置文件和证书，文件可以被上传或下载。 当FTP起用为文件管理协议时存在两个漏洞，通过执行如下FTP命令可利用这些漏洞： CWD MKD CDUP RNFR SIZE RMD 要查看更详细的漏洞描述，可参考如下链接注册用户可查看：...
Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access
Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...
Cisco VPN 3000 Concentrator <= 4.1.7 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access
/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...
CVE-2006-4313
CVE-2006-4313 affects Cisco VPN Concentrator 3000 series (pre-4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F). The vulnerability is an FTP management issue allowing unauthorized execution of FTP commands (CWD, MKD, CDUP, RNFR, SIZE, RMD) to modify files or create/delete directories via unknown...
Cisco VPN 3000 Concentrator FTP Management Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities Document ID: 71141 Advisory ID: cisco-sa-20060823-vpn3k http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml Revision 1.0 For Public Release 2006 August ...
Cisco VPN Concentrator DoS
IKE requests flood leads to resource exhaustion...
Cisco VPN Concentrator IKE resource exhaustion DoS Advisory
Cisco VPN Concentrator IKE resource exhaustion DoS Advisory 1. Overview NTA Monitor discovered a denial of service vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer in July 2005. The vulnerability affects Phase-1 of the IKE...
Cisco VPN 3000 VPN Concentrator Denial of Service
HTTP traffic parsing DoS...
Re: [VulnWatch] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack
With respect to: http://archives.neohapsis.com/archives/vulnwatch/2006-q1/0036.html I'm the person who discovered this particular Cisco VPN vulnerability and divulged some details at the end of my talk at Shmoocon - not "Schmoocon" as the original advisory spells it. The exploit involves sending ...