27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Cisco VPN Concentrator ACL Bypass / DoS (Bug ID CSCdx07754, CSCdx24622, CSCdx24632)<br />

<strong>PVS</strong> ID: 2233 FAMILY: SNMP Traps RISK: HIGH NESSUS ID:11293<br />

Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe<br />

remote VPN concentrator is subject to multiple flaws: XML public rule, HTML pages<br />

access, HTML login processing. This vulnerability is documented as Cisco bug ID<br />

CSCdx07754, CSCdx24622 and CSCdx24632<br />

Solution: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml<br />

CVE-2002-1098<br />

Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)<br />

<strong>PVS</strong> ID: 2234 FAMILY: SNMP Traps<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:11295<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote VPN concentrator is subject to a VPN client authentication vulnerability that can<br />

force a reload of the concentrator when a very large string for the username prompt is sent.<br />

This vulnerability is documented as Cisco bug ID CSCdx39981<br />

Solution: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml<br />

CVE-2002-1095<br />

Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)<br />

<strong>PVS</strong> ID: 2235 FAMILY: SNMP Traps<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:11295<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote VPN concentrator is subject to a VPN client authentication vulnerability that can<br />

force a reload of the concentrator when a very large string for the username prompt is sent.<br />

This vulnerability is documented as Cisco bug ID CSCdx39981<br />

Solution: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml<br />

CVE-2002-1095<br />

Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)<br />

<strong>PVS</strong> ID: 2236 FAMILY: SNMP Traps<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

RISK:<br />

MEDIUM<br />

NESSUS ID:11295<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote VPN concentrator is subject to a VPN client authentication vulnerability that can<br />

force a reload of the concentrator when a very large string for the username prompt is sent.<br />

This vulnerability is documented as Cisco bug ID CSCdx39981<br />

Family Internet Services 560

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!