Multiple Vulnerabilities in Cisco VPN 3000 Series Concentrator and VPN 3002 Hardware Client

Reported September 03, 2002, byCisco Systems.

VERSIONS AFFECTED

·        All Cisco Systems VPN 3000 series concentrators

·        Cisco Systems VPN 3002 hardware client

DESCRIPTION
Multiplevulnerabilities exist in Cisco's VPN 3000 series concentrators and VPN 3002hardware client that can result in information disclosure, Denial of Service(DoS) conditions, and unauthenticated display of passwords on the vulnerabledevices.

VENDOR RESPONSE

Ciscohas issued a noticeregarding these vulnerabilities and recommends that affected users upgrade to afixed release of its software through regular support channels or the Cisco Website.

CREDIT
Discovered by Cisco Systems