Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.

The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577.

The remote VPN concentrator gives out too much information in application layer banners. This vulnerability is documented as Cisco bug ID CSCdu35577.

According to its banner, the remote VPN concentrator gives out too much information in application layer banners. This vulnerability is documented as Cisco bug ID CSCdu35577.

ID	Name	Product	Family	Type	Severity
14718	Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577 HTTP Check)	Nessus	CISCO	Remote	medium
2218	Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)	Nessus Network Monitor	SNMP		medium
2217	Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)	Nessus Network Monitor	SNMP		medium
2216	Cisco VPN Concentrator Service Banners Information Disclosure (Bug ID CSCdu35577)	Nessus Network Monitor	SNMP		medium
11289	Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577)	Nessus	CISCO	Local	medium

Detections

Analytics

CVE-2002-1094

high

Tenable Plugins

medium

medium

medium

medium

medium