CVE-2002-1093: Medium severity Cisco Vpn 3000 Concentrator Series Software vulnerability
Published Oct 4, 2002
·Updated
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request.
Affected Software
9 affected components
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Event History
Oct 4, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1093?
CVE-2002-1093 has a severity rating of high due to the potential denial of service it can cause.
2
How do I fix CVE-2002-1093?
To fix CVE-2002-1093, you should upgrade to Cisco VPN 3000 Concentrator software version 3.0.3(B) or later.
3
Which Cisco products are affected by CVE-2002-1093?
CVE-2002-1093 affects the Cisco VPN 3000 Concentrator versions 2.x.x and 3.x.x before 3.0.3(B).
4
What type of attack does CVE-2002-1093 enable?
CVE-2002-1093 allows remote attackers to cause a denial of service by exploiting long URL requests.
5
Can CVE-2002-1093 be exploited remotely?
Yes, CVE-2002-1093 can be exploited remotely by sending specially crafted long URL requests.