CVE-2002-1101: Medium severity Cisco Vpn 3000 Concentrator Series Software vulnerability
Published Sep 10, 2002
·Updated
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
Affected Software
23 affected components
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.6\(rel\)
Cisco Vpn 3002 Hardware Client
Event History
Sep 10, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Oct 4, 2002
Data Sourced
04:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2002-1101?
CVE-2002-1101 is classified as a denial of service vulnerability.
2
How do I fix CVE-2002-1101?
To fix CVE-2002-1101, upgrade the Cisco VPN 3000 Concentrator software to version 3.5.5 or later.
3
What versions are affected by CVE-2002-1101?
CVE-2002-1101 affects Cisco VPN 3000 Concentrator versions 2.2.x, 3.6, and 3.x prior to 3.5.5.
4
Who can exploit CVE-2002-1101?
Remote attackers can exploit CVE-2002-1101 by sending a long username to the affected Cisco devices.
5
What are the potential consequences of CVE-2002-1101?
Exploitation of CVE-2002-1101 can lead to a denial of service, causing the device to become unresponsive.