CVE-2002-1103: Medium severity Cisco Vpn 3000 Concentrator Series Software vulnerability

Published Sep 10, 2002

Updated

Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.

Affected Software

23 affected components

Cisco Vpn 3000 Concentrator Series Software=2.0

Cisco Vpn 3000 Concentrator Series Software=2.5.2.a

Cisco Vpn 3000 Concentrator Series Software=2.5.2.b

Cisco Vpn 3000 Concentrator Series Software=2.5.2.c

Cisco Vpn 3000 Concentrator Series Software=2.5.2.d

Cisco Vpn 3000 Concentrator Series Software=2.5.2.f

Cisco Vpn 3000 Concentrator Series Software=3.0

Cisco Vpn 3000 Concentrator Series Software=3.0\(rel\)

Cisco Vpn 3000 Concentrator Series Software=3.0.3.a

Cisco Vpn 3000 Concentrator Series Software=3.0.3.b

Cisco Vpn 3000 Concentrator Series Software=3.0.4

Cisco Vpn 3000 Concentrator Series Software=3.1

Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)

Cisco Vpn 3000 Concentrator Series Software=3.1.1

Cisco Vpn 3000 Concentrator Series Software=3.1.2

Cisco Vpn 3000 Concentrator Series Software=3.1.4

Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)

Cisco Vpn 3000 Concentrator Series Software=3.5.1

Cisco Vpn 3000 Concentrator Series Software=3.5.2

Cisco Vpn 3000 Concentrator Series Software=3.5.3

Cisco Vpn 3000 Concentrator Series Software=3.5.4

Cisco Vpn 3000 Concentrator Series Software=3.6\(rel\)

Cisco Vpn 3002 Hardware Client

Remediation

Patch Available

http://www.kb.cert.org/vuls/id/761651

Event History

Sep 10, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 4, 2002

Data Sourced

04:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2002-1103?

CVE-2002-1103 is classified as a high-severity vulnerability due to its potential to cause a denial of service.

Which systems are affected by CVE-2002-1103?

CVE-2002-1103 affects Cisco VPN 3000 Concentrator versions 2.2.x, 3.6(Rel), and earlier versions of 3.x before 3.5.5.

How can I fix CVE-2002-1103?

To mitigate CVE-2002-1103, it is recommended to update the Cisco VPN 3000 Concentrator to the latest available software version.

What type of attack does CVE-2002-1103 enable?

CVE-2002-1103 allows remote attackers to conduct a denial of service attack through malformed or large ISAKMP packets.

Is there a workaround for CVE-2002-1103?

While there are no official workarounds for CVE-2002-1103, limiting access to the affected systems may reduce exposure to potential attacks.