CVEvulnerability
CVE-2005-2025
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
Affected configurations
• cisco vpn 3000 concentrator
• cisco vpn 3015 concentrator
• cisco vpn 3020 concentrator
• cisco vpn 3030 concentator
• cisco vpn 3060 concentrator
• cisco vpn 3080 concentrator
• cisco vpn 3000 concentrator series software 2.0
• cisco vpn 3000 concentrator series software 2.5.2.a
• cisco vpn 3000 concentrator series software 2.5.2.b
• cisco vpn 3000 concentrator series software 2.5.2.c
• cisco vpn 3000 concentrator series software 2.5.2.d
• cisco vpn 3000 concentrator series software 2.5.2.f
• cisco vpn 3000 concentrator series software 3.0
• cisco vpn 3000 concentrator series software 3.0.3.a
• cisco vpn 3000 concentrator series software 3.0.3.b
• cisco vpn 3000 concentrator series software 3.0.4
• cisco vpn 3000 concentrator series software 3.1\(rel\)
• cisco vpn 3000 concentrator series software 3.1.1
• cisco vpn 3000 concentrator series software 3.1.2
• cisco vpn 3000 concentrator series software 3.1.4
• cisco vpn 3000 concentrator series software 3.5\(rel\)
• cisco vpn 3000 concentrator series software 3.5.1
• cisco vpn 3000 concentrator series software 3.5.2
• cisco vpn 3000 concentrator series software 3.5.3
• cisco vpn 3000 concentrator series software 3.5.4
• cisco vpn 3000 concentrator series software 3.5.5
• cisco vpn 3000 concentrator series software 3.6.1
• cisco vpn 3000 concentrator series software 3.6.3
• cisco vpn 3000 concentrator series software 3.6.5
• cisco vpn 3000 concentrator series software 3.6.7
• cisco vpn 3000 concentrator series software 3.6.7.a
• cisco vpn 3000 concentrator series software 3.6.7.b
• cisco vpn 3000 concentrator series software 3.6.7.c
• cisco vpn 3000 concentrator series software 3.6.7.d
• cisco vpn 3000 concentrator series software 3.6.7.f
• cisco vpn 3000 concentrator series software 3.6.7d
• cisco vpn 3000 concentrator series software 4.0
• cisco vpn 3000 concentrator series software 4.0.1
• cisco vpn 3000 concentrator series software 4.0.5.b
• cisco vpn 3000 concentrator series software 4.1
• cisco vpn 3000 concentrator series software 4.1.5.b
• cisco vpn 3000 concentrator series software 4.1.7.a
• cisco vpn 3000 concentrator series software 4.1.7.b
• cisco vpn 3005 concentrator software 4.0.1
Related
Referenced by CWE · observed example (1)
- CWE-206 Observable Internal Behavioral Discrepancy weakness
References
- http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/13992 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/0822 www.vupen.com
- http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/13992 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/0822 www.vupen.com