imPC@ndo IT

Tracker / CVE-2002-1092

CVE-2002-1092

High 7.5

Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

Affected products and versions

cisco vpn_3000_concentrator_series_software · … → 3.6\(rel\)

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References