Cisco

Vpn 3005 Concentrator Software

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2006-3906

  • EPSS 4.28%
  • Veröffentlicht 27.07.2006 22:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the sess...

7.5

CVE-2005-4499

  • EPSS 1.91%
  • Veröffentlicht 22.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, w...

5

CVE-2005-2025

Exploit
  • EPSS 0.5%
  • Veröffentlicht 20.06.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate ...

5

CVE-2005-0943

  • EPSS 0.74%
  • Veröffentlicht 30.03.2005 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

7.5

CVE-2003-0258

  • EPSS 0.65%
  • Veröffentlicht 27.05.2003 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.