Tracker / CVE-2002-0848
CVE-2002-0848
Medium 5.0
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
Affected products and versions
| cisco | vpn_5000_concentrator_series_software · 5.2.14 → 5.2.23.0003 |
|---|---|
| cisco | vpn_5000_concentrator_series_software · 6.0.15 → 6.0.21.0002 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.