medium5.0Public exploit code
CVE-2002-1101
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service2002-09-03 · dos · hardware · Verified
Impact
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Vpn 3000 Concentrator Series Software | Versions 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f |
| Cisco | Vpn 3002 Hardware Client | All versions |