CVE-2002-1491

The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...

CVE-2002-0853

CVE-2002-0853 affects Cisco VPN Client 3.5.4 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU consumption) by sending a packet with a zero-length payload. No root cause details or affected versions beyond the stated range are provided in the supplied docume...

CVE-2002-0848

CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...

CVE-2002-0853

Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a zero-length payload...

CVE-2002-1046

The CVE-2002-1046 entry describes a Denial of Service against Watchguard Firebox firmware 5.x.x via the Dynamic VPN Configuration Protocol (DVCP). A remote attacker can crash the device by sending a malformed packet containing tab characters to TCP port 4110. No root cause, affected versions beyo...

CVE-2002-1492

Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via 1 closetunnel and 2 opentunnel...

l2tpd Malformed Data Remote DoS

The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...

NETGEAR ProSafe VPN Firewall Web Server Malformed Basic Authorization Header Remote DoS (intrusive check)

It was possible to crash the remote Web server possibly the NETGEAR ProSafe VPN Web interface by supplying a long malformed username and password. An attacker may use this flaw to disable the remote service. TRUSTED...

NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service

NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious inpu...

Netgear ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service

source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious input to the device that would result in a crash, and potential denial of...

CVE-2002-1492

Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via 1 closetunnel and 2 opentunnel...

CVE-2002-1492

Cisco VPN 5000 Client for Linux (pre-5.2.7) and VPN 5000 Client for Solaris (pre-5.2.8) are affected by buffer overflows that allow a local user to gain root privileges via the close_tunnel and open_tunnel operations. Root access impact is stated; no exploit details or in-wild status are provided...

L2TP Network Server Detection

The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...

Multitech RouteFinder 550 - Remote Memory Corruption

Multitech RouteFinder 550 - Remote Memory Corruption source: https://www.securityfocus.com/bid/7067/info A vulnerability has been discovered in Multitech RouteFinder 550 VPN firmware release 4.63 and earlier. The problem occurs due to insufficient bounds checking of data supplied in HTTP GET...

Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577)

According to its banner, the remote VPN concentrator gives out too much information in application layer banners. This vulnerability is documented as Cisco bug ID CSCdu35577. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

Cisco VPN Concentrator Invalid Login DoS (CSCdu82823)

The remote VPN concentrator has a bug in its implementation of telnetd. This vulnerability is documented as Cisco bug ID CSCdu82823. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

Cisco VPN 3000 Concentrator PPTP No Encryption Option Remote DoS (CSCdx39981)

The remote VPN concentrator is subject to a VPN client authentication vulnerability that can force a reload of the concentrator when a very large string for the username prompt is sent. This vulnerability is documented as Cisco bug ID CSCdx39981. C Tenable Network Security, Inc. Thanks to Nicolas...

Cisco VPN 3000 Concentrator HTML Interface Long URL DoS (CSCdu15622)

The remote VPN concentrator has a vulnerability in its HTML parser processor. This vulnerability is documented as Cisco bug ID CSCdu15622. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

Cisco VPN 3000 Concentrator Multiple Vulnerabilities (CSCdt56514, CSCdv66718)

The remote VPN concentrator is vulnerable to an internal PPTP / IPSEC authentication login attack. This vulnerability is documented as Cisco bug ID CSCdt56514. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help include"compat.inc"; ifdescription...

Cisco VPN 3000 Concentrator LAN-to-LAN IPSEC Tunnel Connection Termination DoS (CSCdx54675)

The remote VPN concentrator is subject to a LAN-to-LAN IPSEC tunnel vulnerability which allows remote attackers to cause a denial of service. Existing associations might be removed when a new connection is made and no check is done in order to determine if the connection comes from the proper...