Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.

The remote VPN concentrator is subject to a VPN client authentication vulnerability that can force a reload of the concentrator when a very large string for the username prompt is sent. This vulnerability is documented as Cisco bug ID CSCdx39981

The remote VPN concentrator has a vulnerability in its PPTP client. This vulnerability is documented as Cisco bug ID CSCdv66718.

The remote VPN concentrator is vulnerable to an internal PPTP / IPSEC authentication login vulnerability. This vulnerability is documented as Cisco bug ID CSCdt56514.

The remote VPN concentrator is subject to a VPN client authentication vulnerability that can force a reload of the concentrator when a very large string for the username prompt is sent.

This vulnerability is documented as Cisco bug ID CSCdx39981.

The remote VPN concentrator is vulnerable to an internal PPTP / IPSEC authentication login attack. 

This vulnerability is documented as Cisco bug ID CSCdt56514.

ID	Name	Product	Family	Severity
2236	Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)	Nessus Network Monitor	SNMP	medium
2235	Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)	Nessus Network Monitor	SNMP	medium
2234	Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)	Nessus Network Monitor	SNMP	medium
2224	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2223	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2222	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2209	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
2208	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
2207	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
11295	Cisco VPN 3000 Concentrator PPTP No Encryption Option Remote DoS (CSCdx39981)	Nessus	CISCO	medium
11287	Cisco VPN 3000 Concentrator Multiple Vulnerabilities (CSCdt56514, CSCdv66718)	Nessus	CISCO	high

Detections

Analytics

CVE-2002-1095

high

Tenable Plugins

medium

medium

medium

high

high

high

high

high

high

medium

high