Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
References
Link | Resource |
---|---|
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml | Vendor Advisory |
http://www.securityfocus.com/bid/5613 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/10017 | |
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml | Vendor Advisory |
http://www.securityfocus.com/bid/5613 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/10017 |
Configurations
History
20 Nov 2024, 23:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/5613 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/10017 - |
Information
Published : 2002-10-04 04:00
Updated : 2024-11-20 23:40
NVD link : CVE-2002-1092
Mitre link : CVE-2002-1092
CVE.ORG link : CVE-2002-1092
JSON object : View
Products Affected
cisco
- vpn_3000_concentrator_series_software
CWE