CVE-2002-1100 — MEDIUM (5.0)

Vulnerability Description

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Cisco	Vpn 3000 Concentrator Series Software	2.0
Cisco	Vpn 3002 Hardware Client	All versions

References

http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtmlVendor Advisory
http://www.iss.net/security_center/static/10025.phpVendor Advisory
http://www.securityfocus.com/bid/5617
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtmlVendor Advisory
http://www.iss.net/security_center/static/10025.phpVendor Advisory
http://www.securityfocus.com/bid/5617

FAQ

What is CVE-2002-1100?

CVE-2002-1100 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.

How severe is CVE-2002-1100?

CVE-2002-1100 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-1100?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Vpn 3000 Concentrator Series Software, Cisco Vpn 3002 Hardware Client.