Cisco VPN 3000 Concentrator Series Software 3.6.7.d
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*part: o version: 3.6.7.d update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Vpn 3000 Concentrator Series Software (d9f9b25f-4580-5679-a62e-08a9b3ab4113) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-3906 |
vulnerable | 2026-06-08 04:49:10.442941 |
Details available
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4499 |
vulnerable | 2026-06-08 04:48:44.022587 |
Details available
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
Published: 2005-12-22T11:00:00.000Z
Updated: 2024-08-07T23:46:05.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2025 |
vulnerable | 2026-06-08 04:48:28.127199 |
Details available
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
Published: 2005-06-21T04:00:00.000Z
Updated: 2024-08-07T22:15:36.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0943 |
vulnerable | 2026-06-08 04:48:14.014175 |
Details available
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
Published: 2005-04-03T05:00:00.000Z
Updated: 2024-08-07T21:28:29.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0259 |
vulnerable | 2026-06-08 04:47:21.191790 |
Details available
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
Published: 2003-05-08T04:00:00.000Z
Updated: 2024-08-08T01:50:47.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0258 |
vulnerable | 2026-06-08 04:47:21.177356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.