Published: 30/11/2010 Updated: 01/12/2010

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote malicious users to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco asa 5500
cisco pix 500
cisco vpn 3005 concentrator
cisco vpn 3080 concentrator
cisco vpn 3000 concentrator
cisco vpn 3020 concentrator
cisco vpn 3060 concentrator
cisco vpn 3015 concentrator
cisco vpn 3030 concentator

Multiple Cisco VPN devices contain a vulnerability that could allow an unauthenticated, remote attacker to gain access to sensitive information The vulnerability exists due to unsafe handling of error response codes An unauthenticated, remote attacker could exploit this vulnerability by sending malicious requests to the targeted device If succ ...

CWE-200 http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4354

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect