Remote Code Execution Vulnerability in Cisco VPN 3000 Concentrator

CVE-2005-2025

Summary

A vulnerability exists in the Cisco VPN 3000 Concentrator prior to version 4.1.7.F, which allows remote attackers to identify valid group names. By sending an IKE Aggressive Mode packet containing a group name in the ID field, an attacker can determine whether the group name is valid based on the response received. Valid group names prompt a response from the system, while invalid ones do not, thus exposing sensitive configuration information that could be exploited for further attacks.

References