Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T22:15:36.602Z
Reserved: 2005-06-21T00:00:00
Link: CVE-2005-2025

No data.

Status : Deferred
Published: 2005-06-20T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2005-2025

No data.