Description
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
References
- VU#727780 third-party-advisory
- 20030507 Cisco VPN 3000 Concentrator Vulnerabilities vendor-advisory
- cisco-vpn-unauth-access(11954) vdb-entry