Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
BID:5611
Info
Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
| Bugtraq ID: | 5611 |
| Class: | Design Error |
| CVE: |
CVE-2002-1096 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Vulnerability announced in a Cisco Security Advisory. |
| Vulnerable: |
Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 |
| Not Vulnerable: |
Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.1.4 |
Discussion
Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
Cisco VPN 3000 series concentrators are prone to an issue which may cause user credentials to be disclosed to remote attackers under some circumstances.
It has been reported that some web pages accessible to restricted access administrative users contain plaintext user credentials in the HTML source code of the vulnerable pages.
Cisco VPN 3000 series concentrators are prone to an issue which may cause user credentials to be disclosed to remote attackers under some circumstances.
It has been reported that some web pages accessible to restricted access administrative users contain plaintext user credentials in the HTML source code of the vulnerable pages.
Exploit / POC
Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
This issue may be exploited with a web browser.
This issue may be exploited with a web browser.
Solution / Fix
Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.1 (Rel)
Cisco VPN 3000 Concentrator 3.1.1
Cisco VPN 3000 Concentrator 3.1.2
Cisco VPN 3000 Concentrator 3.5 (Rel)
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.1 (Rel)
-
Cisco VPN 3000 Concentrator 3.1.4
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.1.1
-
Cisco VPN 3000 Concentrator 3.1.4
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.1.2
-
Cisco VPN 3000 Concentrator 3.1.4
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.5 (Rel)
-
Cisco VPN 3000 Concentrator 3.5.1
http://www.cisco.com/tac
References
Cisco VPN 3000 Series Concentrator User Credential Disclosure Vulnerability
References:
References: