CVE-2002-1095

Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-10-04

Last modified

2024-08-08

Affected products

• Secure Access Control Server (Cisco)
• Vpn 3000 Concentrator Series Software (Cisco)
• Vpn 3002 Hardware Client (Cisco)

References

• http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
• http://www.iss.net/security_center/static/10021.php
• http://www.securityfocus.com/bid/5625