medium5.0
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SS…
Impact
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Vpn 3000 Concentrator Series Software | Versions 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f |
| Cisco | Vpn 3002 Hardware Client | All versions |
References
- NVD record
- CVE.org record
- http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10020.php
- http://www.securityfocus.com/bid/5621
- http://www.securityfocus.com/bid/5623
- http://www.securityfocus.com/bid/5624
- http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10020.php
- http://www.securityfocus.com/bid/5621
- http://www.securityfocus.com/bid/5623
- http://www.securityfocus.com/bid/5624