Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
BID:5619
Info
Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
| Bugtraq ID: | 5619 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2002 12:00AM |
| Updated: | Sep 03 2002 12:00AM |
| Credit: | Vulnerability announced in a Cisco Security Advisory. |
| Vulnerable: |
Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 |
| Not Vulnerable: |
Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 |
Discussion
Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
There are a number of circumstances where maliciously constructed Internet Security Association and Key Management Protocol (ISAKMP) packets may cause an affected Cisco VPN 3000 Concentrator device to reload. Denial of network/VPN service may be possible.
There are a number of circumstances where maliciously constructed Internet Security Association and Key Management Protocol (ISAKMP) packets may cause an affected Cisco VPN 3000 Concentrator device to reload. Denial of network/VPN service may be possible.
Exploit / POC
Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.5 (Rel)
Cisco VPN 3000 Concentrator 3.5.3
Cisco VPN 3000 Concentrator 3.5.4
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.5 (Rel)
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.5.3
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.5.4
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
References
Cisco VPN 3000 Series Concentrator ISAKMP Denial of Service Vulnerabilities
References:
References: