CVE-2006-3073

Multiple cross-site scripting XSS vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances ASA, when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in ...

CVE-2006-0483

Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service device reload or user disconnect via a crafted HTTP packet...

CVE-2006-0483

CVE-2006-0483 affects Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A. The vulnerability allows remote attackers to cause a denial of service (device reload or user disconnect) by sending a crafted HTTP packet. The incident is categorized with network access, no authent...

CVE-2005-4499

CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...

[SA15393] Cisco Various Products TCP Timestamp Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2003-0258

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication...

CVE-2003-0258

CVE-2003-0258 affects Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (3.5.x–4.0.REL). When IPSec over TCP is enabled for a port on the concentrator, traffic forwarded on that port may be delivered to all hosts on the protected network, not only those using IPsec, enabling ...

CVE-2003-0259

The CVE-2003-0259 issue affects Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Client (2.x–3.6.7). A malformed SSH initialization packet during the initial SSH session setup could cause the device to reload, yielding a denial-of-service condition. CERT/CC and Cisco advisories...

CVE-2003-0260

Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (2.x.x–3.6.7A) are affected by a DoS vulnerability caused by a flood of malformed ICMP packets, potentially degrading performance or causing a reload. The issue is triggered remotely and is documented across NVD and CERT advis...

PT-2005-5540 · Cisco · Vpn 3000 +2

Name of the Vulnerable Software and Affected Versions: Cisco PIX and VPN 3000 concentrators affected versions not specified Description: The issue exists in the downloadable RADIUS ACLs feature, where a random internal name for an ACL is generated and also used as a hidden username and password...