180 matches found
[Full-disclosure] Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack Advisory ID: cisco-sa-20060126-vpn http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml Revision 1.0 For Public Release 2006 January 26 1700 UTC GMT...
Cisco bug ID CSCdu35577 (Web Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. OpenVAS Vulnerability Test $Id: CSCdu35577web.nasl 8023 2017-12-07...
Cisco VPN 3000 Series Concentrator Information Disclosure Vulnerability (CSCdu35577) - Active Check
Cisco VPN 3000 series concentrators are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Michael J. Richardson Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2005-2025
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname...
CVE-2005-2025
CVE-2005-2025 affects Cisco VPN 3000 Concentrator prior to 4.1.7.F. The vulnerability allows remote attackers to enumerate valid group names by sending an IKE Aggressive Mode packet with the group name in the ID field; a response is generated for valid group names, while invalid ones elicit no re...
CVE-2005-2025
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname...
[Full-disclosure] Cisco VPN Concentrator Groupname Enumeration Vulnerability
Cisco VPN Concentrator Groupname Enumeration Vulnerability 1. Overview: NTA Monitor has discovered a groupname enumeration vulnerability in the Cisco VPN 3000 series concentrator products while performing a VPN security test for a customer. The vulnerability affects remote access VPNs with...
Cisco VPN Concentrator Group Name Enumeration
Binary data 3023.prm...
Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
...
CVE-2005-0943
CVE-2005-0943 affects Cisco VPN 3000 Series Concentrator running firmware 4.1.7.A and earlier. The vulnerability allows remote attackers to cause a denial of service (device reload or user connection drop) by sending a crafted HTTPS packet. Attack vector is network, with low complexity and no aut...
CVE-2005-0943
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service device reload or drop user connection via a crafted HTTPS packet...
CVE-2005-0943
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service device reload or drop user connection via a crafted HTTPS packet...
Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)
Binary data 2230.prm...
Cisco VPN Concentrator ISAKMP PAcket Remote DoS (Bug ID CSCdy38035)
Binary data 2247.prm...
Cisco VPN Concentrator Service Banners Information Disclosure (Bug ID CSCdu35577)
Binary data 2216.prm...
Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)
Binary data 2237.prm...
Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)
Binary data 2211.prm...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2234.prm...