PT-2005-1968 · Cisco · Cisco Vpn 3000 Series Concentrator

Published 2005-03-30 · Updated 2018-10-30 · CVE-2005-0943

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco VPN 3000 series Concentrator versions 4.1.7.A and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in either a device reload or a drop in user connection, by sending a crafted HTTPS packet.

Recommendations For Cisco VPN 3000 series Concentrator versions 4.1.7.A and earlier, update to a version later than 4.1.7.A to resolve the issue.

Fix

Related Identifiers

CVE-2005-0943

Affected Products

Cisco Vpn 3000 Series Concentrator

References · 5

• http://securityfocus.com/bid/12948 · Vendor Advisory
• http://secunia.com/advisories/14784 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0943 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19903 · Note