CVEvulnerability

CVE-2002-1094

5.0 MEDIUM Published 2002-10-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.

Affected configurations

• cisco vpn 3000 concentrator series software 2.0 • cisco vpn 3000 concentrator series software 2.5.2.a • cisco vpn 3000 concentrator series software 2.5.2.b • cisco vpn 3000 concentrator series software 2.5.2.c • cisco vpn 3000 concentrator series software 2.5.2.d • cisco vpn 3000 concentrator series software 2.5.2.f • cisco vpn 3000 concentrator series software 3.0 • cisco vpn 3000 concentrator series software 3.0\(rel\) • cisco vpn 3000 concentrator series software 3.0.3.a • cisco vpn 3000 concentrator series software 3.0.3.b • cisco vpn 3000 concentrator series software 3.0.4 • cisco vpn 3000 concentrator series software 3.1\(rel\) • cisco vpn 3000 concentrator series software 3.1.1 • cisco vpn 3000 concentrator series software 3.1.2 • cisco vpn 3000 concentrator series software 3.1.4 • cisco vpn 3000 concentrator series software 3.5\(rel\) • cisco vpn 3000 concentrator series software 3.5.1 • cisco vpn 3000 concentrator series software 3.5.2 • cisco vpn 3000 concentrator series software 3.5.3 • cisco vpn 3002 hardware client

References