CVE-2002-1098

CVE-2002-1098 affects Cisco VPN 3000 Concentrator 2.2.x and 3.x prior to 3.5.3. When the XML filter configuration is enabled, the device’s HTTPS on Public Inbound (XML-Auto)(forward/in) rule sets the protocol to ANY, allowing arbitrary traffic to pass through the concentrator. The available docum...