Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-06-21T04:00:00
Updated: 2024-08-07T22:15:36.602Z
Reserved: 2005-06-21T00:00:00
Link: CVE-2005-2025
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-06-20T04:00:00.000
Modified: 2018-10-30T16:26:19.357
Link: CVE-2005-2025
Redhat
No data.