exploits , vulnerabilities , articles , Cisco VPN 3000 Series Concentrator Posted User Credential Denial Of Service Vulnerability

Title	Cisco VPN 3000 Series Concentrator Posted User Credential Denial Of Service Vulnerability
Published	2002-09-03-12:00AM
Updated	2002-09-04-12:17AM
Class	Failure to Handle Exceptional Conditions
CVE	CAN-2002-1100
Remote	Yes
Local	No
Credit	Vulnerability announced in a Cisco Security Advisory.
Vulnerable	Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0
Not Vulnerable	Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3
Code	There is no exploit code required. This may be exploited using a text editor and a web browser. It may also be exploited using a web client that has the capability of submitting custom form data manually.
TXT