medium5.0
CVE-2002-1099
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly…
Impact
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Vpn 3000 Concentrator Series Software | Versions 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f |
| Cisco | Vpn 3002 Hardware Client | All versions |
References
- NVD record
- CVE.org record
- http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10024.php
- http://www.securityfocus.com/bid/5616
- http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
- http://www.iss.net/security_center/static/10024.php
- http://www.securityfocus.com/bid/5616