CVE-2002-1098

Published Oct 4, 2002

Last updated 6 years ago

Overview

Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "923949D1-06EC-462F-A3BC-FCAB448042A2"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "901B1838-7169-41E5-80EF-29BB680BF937"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CDAEAA5F-0A98-48B7-8012-9B9909243135"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CB38834B-E4AB-43F4-888B-14B088C95594"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23F8059B-3968-4D63-B1B3-74E545C918D1"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "701CDA0D-F932-4251-B484-8F20F0AE9003"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93500B0E-5EE6-49C1-AD66-3AB007020B8B"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E674AA43-905E-40E0-A70F-77D05C62C18D"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "645AB682-2965-4C8D-B323-AB510E424407"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "175CD875-3402-4B06-A3FA-7DFFCBB44056"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C544E523-15E5-4CE5-8113-53454F5D9973"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12ECF578-84BF-4F41-9462-C09FA517F2A0"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References