Cisco VPN 3000 Concentrator Malformed ISAKMP Packet Remote DoS (CSCdy38035)

medium Nessus Plugin ID 11297

Synopsis

The remote VPN concentrator is affected by ISAKMP package processing vulnerability.

Description

According to its banner, the remote VPN concentrator is subject to an ISAKMP package processing vulnerability. Malformed or a very large number of ISAKMP packets might cause a reload of the concentrator. The vulnerability is aggravated if debug is turned on. This vulnerability is documented as Cisco bug ID CSCdy38035.

Solution

Apply vendor-supplied patches.

Plugin Details

Severity: Medium

ID: 11297

File Name: CSCdy38035.nasl

Version: 1.18

Type: local

Family: CISCO

Published: 3/1/2003

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:cisco:ios

Required KB Items: SNMP/community, SNMP/sysDesc, CISCO/model

Vulnerability Publication Date: 9/3/2002

Reference Information

CVE: CVE-2002-1103

Detections

Analytics