First published: Fri Oct 04 2002(Updated: )
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco VPN 3000 concentrator series software | =2.0 | |
Cisco VPN 3000 concentrator series software | =2.5.2.a | |
Cisco VPN 3000 concentrator series software | =2.5.2.b | |
Cisco VPN 3000 concentrator series software | =2.5.2.c | |
Cisco VPN 3000 concentrator series software | =2.5.2.d | |
Cisco VPN 3000 concentrator series software | =2.5.2.f | |
Cisco VPN 3000 concentrator series software | =3.0 | |
Cisco VPN 3000 concentrator series software | =3.0\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.0.3.a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1093 has a severity rating of high due to the potential denial of service it can cause.
To fix CVE-2002-1093, you should upgrade to Cisco VPN 3000 Concentrator software version 3.0.3(B) or later.
CVE-2002-1093 affects the Cisco VPN 3000 Concentrator versions 2.x.x and 3.x.x before 3.0.3(B).
CVE-2002-1093 allows remote attackers to cause a denial of service by exploiting long URL requests.
Yes, CVE-2002-1093 can be exploited remotely by sending specially crafted long URL requests.