Cisco VPN Concentrator ISAKMP PAcket Remote DoS (Bug ID CSCdy38035)

Binary data 2247.prm...

Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)

Binary data 2234.prm...

Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)

Binary data 2210.prm...

Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)

Binary data 2235.prm...

Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)

Binary data 2237.prm...

Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)

Binary data 2222.prm...

Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)

Binary data 2217.prm...

Cisco VPN Concentrator Invalid Login DoS (Bug ID CSCdu82823)

Binary data 2221.prm...

Cisco VPN Concentrator Invalid Login DoS (Bug ID CSCdu82823)

Binary data 2220.prm...

Cisco VPN Concentrator ISAKMP Packet Remote DoS (Bug ID CSCdy38035)

Binary data 2246.prm...

Cisco VPN Concentrator Service Banners Information Disclosure (Bug ID CSCdu35577)

Binary data 2216.prm...

Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)

Binary data 2211.prm...

CVE-2002-1104

CVE-2002-1104 concerns Cisco VPN Client software (versions 2.x.x and 3.x prior to 3.0.5). The vulnerability allows remote attackers to trigger a denial of service (crash) by sending TCP packets with both source and destination ports equal to 137 (NETBIOS). The available description states the imp...

CVE-2002-1447

The CVE-2002-1447 issue affects the UNIX VPN Client’s vpnclient executable. A buffer overflow is triggered by a long profile name in the connect argument, allowing local users to obtain administrative privileges. Affected product/version is VPN Client prior to 3.5.2. Remediation: upgrade to versi...

CVE-2002-1096

CVE-2002-1096 affects Cisco VPN 3000 Concentrator (2.2.x and 3.x before 3.5.1). The root cause is that user passwords are stored in plaintext inside HTML source code of the embedded web server, allowing restricted administrators to obtain passwords. Documents confirm the vulnerability and impacte...

CVE-2002-1092

Cisco VPN 3000 Concentrator 3.6Rel and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication...

CVE-2002-1096

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code...

CVE-2002-1104

Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...

CVE-2002-1447

Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument...

CVE-2004-0040

A buffer overflow flaw in the ISAKMP implementation used by Check Point VPN-1, SecuRemote, and SecureClient (ISAKMP/IKE) allows unauthenticated remote code execution via a crafted ISAKMP packet with a large Certificate Request payload. Exploitation targets UDP 500 and can run with VPN process pri...