CVE-2002-1105

Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password.

Affected products

• Cisco / vpn_client2.0 – 2.0
• Cisco / vpn_client3.0 – 3.0
• Cisco / vpn_client3.1 – 3.1
• Cisco / vpn_client3.5.1 – 3.5.1

References

• VENDOR_ADVISORYhttp://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
• MISChttp://www.securityfocus.com/bid/5650
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/10044