First published: Tue Sep 10 2002(Updated: )
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco VPN 3000 concentrator series software | =2.0 | |
Cisco VPN 3000 concentrator series software | =2.5.2.a | |
Cisco VPN 3000 concentrator series software | =2.5.2.b | |
Cisco VPN 3000 concentrator series software | =2.5.2.c | |
Cisco VPN 3000 concentrator series software | =2.5.2.d | |
Cisco VPN 3000 concentrator series software | =2.5.2.f | |
Cisco VPN 3000 concentrator series software | =3.0 | |
Cisco VPN 3000 concentrator series software | =3.0\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.0.3.a | |
Cisco VPN 3000 concentrator series software | =3.0.3.b | |
Cisco VPN 3000 concentrator series software | =3.0.4 | |
Cisco VPN 3000 concentrator series software | =3.1 | |
Cisco VPN 3000 concentrator series software | =3.1\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.1.1 | |
Cisco VPN 3000 concentrator series software | =3.1.2 | |
Cisco VPN 3000 concentrator series software | =3.1.4 | |
Cisco VPN 3000 concentrator series software | =3.5\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.5.1 | |
Cisco VPN 3000 concentrator series software | =3.5.2 | |
Cisco VPN 3000 concentrator series software | =3.5.3 | |
Cisco VPN 3000 concentrator series software | =3.5.4 | |
Cisco VPN 3000 concentrator series software | =3.6\(rel\) | |
Cisco VPN 3002 Hardware Client |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1101 is classified as a denial of service vulnerability.
To fix CVE-2002-1101, upgrade the Cisco VPN 3000 Concentrator software to version 3.5.5 or later.
CVE-2002-1101 affects Cisco VPN 3000 Concentrator versions 2.2.x, 3.6, and 3.x prior to 3.5.5.
Remote attackers can exploit CVE-2002-1101 by sending a long username to the affected Cisco devices.
Exploitation of CVE-2002-1101 can lead to a denial of service, causing the device to become unresponsive.