CVE-2001-0428

Description

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option.

Affected products

• Cisco / vpn_3000_concentrator_series_software2.5.2.a – 2.5.2.a
• Cisco / vpn_3000_concentrator_series_software2.5.2.b – 2.5.2.b
• Cisco / vpn_3000_concentrator_series_software2.5.2.c – 2.5.2.c
• Cisco / vpn_3000_concentrator_series_software2.5.2.d – 2.5.2.d

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6360
• MISChttp://www.osvdb.org/1786
• VENDOR_ADVISORYhttp://www.cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml
• MISChttp://www.securityfocus.com/bid/2573