CVE-2005-0943

Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-03-30

Last modified

2024-08-07

Affected products

• Vpn 3000 Concentrator Series Software (Cisco)
• Vpn 3002 Hardware Client (Cisco)
• Vpn 3005 Concentrator Software (Cisco)
• Vpn 3015 Concentrator (Cisco)
• Vpn 3020 Concentrator (Cisco)
• Vpn 3030 Concentator (Cisco)
• Vpn 3060 Concentrator (Cisco)
• Vpn 3080 Concentrator (Cisco)

References

• http://secunia.com/advisories/14784
• http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml
• http://www.securityfocus.com/bid/12948
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19903