CVE-2002-1103

Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml	Vendor Advisory
http://www.kb.cert.org/vuls/id/761651	Patch Third Party Advisory US Government Resource
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml	Vendor Advisory
http://www.kb.cert.org/vuls/id/761651	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\(rel\):::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\(rel\):::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:::::::*
	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6\(rel\):::::::*

cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:40

Type	Values Removed	Values Added
References	~~() http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - Vendor Advisory~~	() http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - Vendor Advisory
References	~~() http://www.kb.cert.org/vuls/id/761651 - Patch, Third Party Advisory, US Government Resource~~	() http://www.kb.cert.org/vuls/id/761651 - Patch, Third Party Advisory, US Government Resource

Information

Published : 2002-10-04 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2002-1103

Mitre link : CVE-2002-1103

CVE.ORG link : CVE-2002-1103

JSON object : View

Products Affected

cisco

vpn_3000_concentrator_series_software
vpn_3002_hardware_client

CWE

NVD-CWE-Other

{"id": "CVE-2002-1103", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-10-04T04:00:00.000", "references": [{"url": "http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/761651", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/761651", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "923949D1-06EC-462F-A3BC-FCAB448042A2"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "901B1838-7169-41E5-80EF-29BB680BF937"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDAEAA5F-0A98-48B7-8012-9B9909243135"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB38834B-E4AB-43F4-888B-14B088C95594"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23F8059B-3968-4D63-B1B3-74E545C918D1"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "701CDA0D-F932-4251-B484-8F20F0AE9003"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93500B0E-5EE6-49C1-AD66-3AB007020B8B"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E674AA43-905E-40E0-A70F-77D05C62C18D"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "645AB682-2965-4C8D-B323-AB510E424407"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76F7F019-A0A4-49CD-BB28-24BF7725AC89"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "175CD875-3402-4B06-A3FA-7DFFCBB44056"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C544E523-15E5-4CE5-8113-53454F5D9973"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B09F6EBD-C3FC-4680-BE31-A766D863237D"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B68705AB-A133-401F-9F41-64594E071816"}, {"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6\\(rel\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1866690B-BCF3-4134-946D-FB4AE1269961"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12ECF578-84BF-4F41-9462-C09FA517F2A0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

5.0 /10