CVE-2002-1101

Cisco VPN 3000 Concentrator 2.2.x, 3.6Rel, and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name...

CVE-2002-1098

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound XML-Autoforward/in" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator...

Cisco VPN Concentrator 3000 ISAKMP DoS details

Hi list, the subject says it all. I would like to share the details of the Cisco VPN Concentrator 3000 ISAKMP packet parsing vulnerability mentioned at http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml The bug affects all software versions including 3.6.0 and I hope everyone got...

CVE-2002-1100

CVE-2002-1100 affects Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3. The vulnerability allows remote attackers to trigger a denial of service (crash) by sending an excessively long username or password to the HTML login interface. The issue is evidenced by the NVD description ...

CVE-2002-1103

The CVE-2002-1103 issue affects Cisco VPN 3000 Concentrator devices running 2.2.x, 3.6(Rel), and 3.x before 3.5.5. The root cause is handling ISAKMP packets; malformed or an excessive number of ISAKMP packets can cause the device to reload, resulting in a denial of service. Attacks can be perform...

CVE-2002-1101

Cisco VPN 3000 Concentrator versions 2.2.x, 3.6(Rel), and 3.x before 3.5.5 are affected by CVE-2002-1101. The vulnerability allows remote attackers to cause a denial of service by sending a long username, indicating an input handling flaw that can exhaust resources and affect availability. No exp...

CVE-2002-1094

Cisco VPN 3000 Series Concentrator Information Disclosure (CVE-2002-1094) affects 2.x.x and 3.x.x firmware up to but not including 3.5.4. The vulnerability leaks potentially sensitive information via banners in SSH, FTP, or an incorrect HTTP request, allowing remote information disclosure without...

CVE-2002-1094: Undefined Security Weakness

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the 1 SSH banner, 2 FTP banner, or 3 an incorrect HTTP request...

CVE-2002-1100: Undefined Security Weakness

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service crash via a long 1 username or 2 password to the HTML login interface...

CVE-2002-1101: Undefined Security Weakness

Cisco VPN 3000 Concentrator 2.2.x, 3.6Rel, and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name...

CVE-2002-1103: Undefined Security Weakness

Cisco VPN 3000 Concentrator 2.2.x, 3.6Rel, and 3.x before 3.5.5, allows remote attackers to cause a denial of service via 1 malformed or 2 large ISAKMP packets...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

// source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client. Successful exploitation will cause the device to reload. / ISAKMP Cisco VPN...

CVE-2001-0757

Cisco 6400 NRP2 (Access Concentrator Node Route Processor 2) is affected on IOS releases earlier than 12.1(05)DC01. The module lets Telnet access occur when no vty password is set, enabling a remote attacker to gain unauthorized access and potentially modify device configuration or affect traffic...

CVE-2001-0757: Undefined Security Weakness

Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...

Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) module permits telnet access when no password has been set

Overview The Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 module permits unauthenticated telnet access when no password has been set. Description The Access Concentrator Node Route Processor is a router blade for the Cisco 6400. It's purpose is to aggregate and terminate incoming...

VPN3000 Concentrator TELNET Vulnerability

...

Nortel CES (3DES version) offers false sense of security when using IPSEC

Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...