Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
BID:5620
Info
Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
| Bugtraq ID: | 5620 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2002 12:00AM |
| Updated: | Sep 03 2002 12:00AM |
| Credit: | Vulnerability announced in a Cisco Security Advisory. |
| Vulnerable: |
Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 |
| Not Vulnerable: |
Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.5.5 |
Discussion
Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client.
Successful exploitation will cause the device to reload.
Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client.
Successful exploitation will cause the device to reload.
Exploit / POC
Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
This issue may be exploited with a VPN client.
Exploit contributed by nowin of Phenoelit <[email protected]> and FX of Phenoelit <[email protected]>:
This issue may be exploited with a VPN client.
Exploit contributed by nowin of Phenoelit <[email protected]> and FX of Phenoelit <[email protected]>:
Solution / Fix
Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.5 (Rel)
Cisco VPN 3000 Concentrator 3.5.3
Cisco VPN 3000 Concentrator 3.5.4
Cisco VPN 3000 Concentrator 3.6
Solution:
Cisco has released fixes which address this issue. For Cisco VPN 3002 Hardware Client, this issue is addressed in versions 3.5.5 and 3.6.1 of the firmware.
Cisco VPN 3000 Concentrator 3.5 (Rel)
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.5.3
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.5.4
-
Cisco VPN 3000 Concentrator 3.5.5
http://www.cisco.com/tac
Cisco VPN 3000 Concentrator 3.6
-
Cisco VPN 3000 Concentrator 3.6.1
http://www.cisco.com/tac
References
Cisco VPN 3000 Series Concentrator Client Authentication Denial Of Service Vulnerability
References:
References: