CVE-2002-1094

Cisco VPN 3000 <3.5.4 - Info Disclosure

Title source: llm
STIX 2.1

Description

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.

References (5)

Core 5
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10020.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5624
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5621
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5623

Scores

EPSS 0.0158
EPSS Percentile 73.0%

Details

Status published
Products (20)
cisco/vpn_3000_concentrator_series_software 2.0
cisco/vpn_3000_concentrator_series_software 2.5.2.a
cisco/vpn_3000_concentrator_series_software 2.5.2.b
cisco/vpn_3000_concentrator_series_software 2.5.2.c
cisco/vpn_3000_concentrator_series_software 2.5.2.d
cisco/vpn_3000_concentrator_series_software 2.5.2.f
cisco/vpn_3000_concentrator_series_software 3.0
cisco/vpn_3000_concentrator_series_software 3.0\(rel\)
cisco/vpn_3000_concentrator_series_software 3.0.3.a
cisco/vpn_3000_concentrator_series_software 3.0.3.b
... and 10 more
Published Oct 04, 2002
Tracked Since Feb 18, 2026