Vulnerabilities > Cisco > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-10-11 | CVE-2002-1189 | Unspecified vulnerability in Cisco Unity Server The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding. | 4.6 |
| 2002-10-04 | CVE-2002-1108 | Unspecified vulnerability in Cisco VPN Client Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel. | 5.0 |
| 2002-10-04 | CVE-2002-1105 | Unspecified vulnerability in Cisco VPN Client Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password. | 4.6 |
| 2002-10-04 | CVE-2002-1104 | Denial Of Service vulnerability in Cisco VPN Client 2.0/3.0 Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS). | 5.0 |
| 2002-10-04 | CVE-2002-1103 | Denial-Of-Service vulnerability in Cisco products Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets. | 5.0 |
| 2002-10-04 | CVE-2002-1102 | Denial of Service vulnerability in Cisco products The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection. | 5.0 |
| 2002-10-04 | CVE-2002-1101 | Denial-Of-Service vulnerability in Cisco products Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name. | 5.0 |
| 2002-10-04 | CVE-2002-1100 | Denial Of Service vulnerability in Cisco products Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface. | 5.0 |
| 2002-10-04 | CVE-2002-1099 | Information Disclosure vulnerability in Cisco products Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages. | 5.0 |
| 2002-10-04 | CVE-2002-1095 | Remote Denial Of Service vulnerability in Cisco products Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set. | 5.0 |