Secunia

Cisco has released a security bulletin describing three vulnerabilities in VPN 3000 Concentrator. These allow malicious people to access internal hosts or cause a Denial of Service.

If IPSec has been configured to use TCP, it is possible to access hosts on the private network on the same port that is used for IPSec communication. However, this requires that the hosts on the private network has been assigned routeable addresses or that a malicious person has access to an external host where traffic is routed to the private network.

Another vulnerability exists in the SSH service. It is possible to cause the VPN 3000 Concentrator to reload by sending a malformed initialization packet.

The third vulnerability allows malicious people to slow down the VPN 3000 Concentrator by sending malformed ICMP messages to any interface.

Solution
An update is available from:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml

Deep Links
Links available in Customer Area