Unscored severity · published Oct 4, 2002
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more · source: NVD
V3
Vpn 3002 Hardware Client · Cisco
All versions, or not specified · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1094
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1094
Vendor Advisory
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Vendor Advisory
http://www.iss.net/security_center/static/10020.php
www.securityfocus.com
http://www.securityfocus.com/bid/5621
www.securityfocus.com
http://www.securityfocus.com/bid/5623
www.securityfocus.com
http://www.securityfocus.com/bid/5624
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…