CVE-2002-1100: Medium severity Cisco Vpn 3000 Concentrator Series Software vulnerability
Published Sep 10, 2002
·Updated
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.
Affected Software
20 affected components
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3002 Hardware Client
Event History
Sep 10, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Oct 4, 2002
Data Sourced
04:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2002-1100?
CVE-2002-1100 has a severity rating that can lead to a denial of service on affected systems.
2
How do I fix CVE-2002-1100?
To fix CVE-2002-1100, upgrade the Cisco VPN 3000 Concentrator to version 3.5.3 or later.
3
What versions are affected by CVE-2002-1100?
CVE-2002-1100 impacts Cisco VPN 3000 Concentrator versions 2.2.x and 3.x prior to 3.5.3.
4
What type of attack does CVE-2002-1100 facilitate?
CVE-2002-1100 facilitates a denial of service attack through long usernames or passwords.
5
Who is impacted by CVE-2002-1100?
Organizations using vulnerable versions of the Cisco VPN 3000 Concentrator are at risk from CVE-2002-1100.