PT-2002-1862 · Cisco · Cisco Vpn 5000 Series Concentrator

Published 2002-08-12 · Updated 2018-10-30 · CVE-2002-0848

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco VPN 5000 series concentrator hardware versions 6.0.21.0002 and earlier Cisco VPN 5000 series concentrator hardware versions 5.2.23.0003 and earlier

Description: The issue allows remote attackers to steal passwords via sniffing because the user password is sent in cleartext in a validation retry request when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge.

Recommendations: For versions 6.0.21.0002 and earlier, consider disabling the use of Password Authentication Protocol (PAP) or Challenge with RADIUS until a fix is available. For versions 5.2.23.0003 and earlier, consider disabling the use of Password Authentication Protocol (PAP) or Challenge with RADIUS until a fix is available. As a temporary workaround, restrict access to the RADIUS authentication mechanism to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0848

Affected Products

Cisco Vpn 5000 Series Concentrator

References · 4

• http://cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0848 · Security Note
• http://iss.net/security_center/static/9781.php · Note
• http://securityfocus.com/bid/5417 · Note