CVE-2002-1095

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.

Affected (7)

Products: Cisco: Vpn 3000 Concentrator Series Software, Secure Access Control Server, Vpn 3002 Hardware Client

Cisco

3 products

Vpn 3000 Concentrator Series Software

Secure Access Control Server

Vpn 3002 Hardware Client

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Cisco Vpn 3000 Concentrator Series Software	Version 2.0
Cisco Vpn 3000 Concentrator Series Software	Version 2.5.2.a
Cisco Vpn 3000 Concentrator Series Software	Version 2.5.2.b
Cisco Vpn 3000 Concentrator Series Software	Version 2.5.2.c
Cisco Vpn 3000 Concentrator Series Software	Version 2.5.2.d
Cisco Secure Access Control Server	Version 2.6.3
Cisco Vpn 3002 Hardware Client	All versions