CVE-2005-2025

CVE-2005-2025 affects Cisco VPN 3000 Concentrator prior to 4.1.7.F. The vulnerability allows remote attackers to enumerate valid group names by sending an IKE Aggressive Mode packet with the group name in the ID field; a response is generated for valid group names, while invalid ones elicit no re...

CVE-2010-4354

The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...

CVE-2001-0427

The CVE-2001-0427 issue affects Cisco VPN 3000 series concentrators prior to version 2.5.2(F). An attacker can trigger a denial-of-service by flooding SSL or telnet login services with invalid login attempts, exploiting improper disconnect behavior after repeated failures. Impact is network-based...