PT-2001-1643 · Cisco · Cisco Vpn 3000 Series Concentrators

Published 2001-07-02 · Updated 2018-10-30 · CVE-2001-0428

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco VPN 3000 series concentrators versions prior to 2.5.2(F)

Description The issue allows remote attackers to cause a denial of service via an IP packet with an invalid IP option.

Recommendations For versions prior to 2.5.2(F), update to version 2.5.2(F) or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-0428

Affected Products

Cisco Vpn 3000 Series Concentrators

References · 5

• http://securityfocus.com/bid/2573 · Vendor Advisory
• http://cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0428 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6360 · Note
• http://osvdb.org/1786 · Note