CVE-2002-1094

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-10-04

Last modified

2024-08-08

Affected products

• Vpn 3000 Concentrator Series Software (Cisco)
• Vpn 3002 Hardware Client (Cisco)

References

• http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
• http://www.iss.net/security_center/static/10020.php
• http://www.securityfocus.com/bid/5621
• http://www.securityfocus.com/bid/5623
• http://www.securityfocus.com/bid/5624