Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
http://www.securityfocus.com/bid/5624
http://www.securityfocus.com/bid/5623
http://www.securityfocus.com/bid/5621
http://www.iss.net/security_center/static/10020.php
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml