Vulnerability in Cisco Vpn_3000_concentrator_series_software
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Vpn_3000_concentrator_series_software — versions 2.0, 2.5.2.a, 2.5.2.b
- Cisco Vpn_3002_hardware_client
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_BID)