CVE:CVE-2003-0258
CNNVD:CNNVD-200305-065
Cisco VPN 3000系列集中器和Cisco VPN 3002硬件客户端从3.5.x到4.0.REL版本存在漏洞。当为了集中器上的端口启用TCP上的IPSec，远程攻击者可以到达没有认证的专用网络。
solution:Upgrade cisco vpn_3015_concentrator to a higher version than *; Upgrade cisco vpn_3030_concentator to a higher version than *; Upgrade cisco vpn_3060_concentrator to a higher version than *; Upgrade cisco vpn_3080_concentrator to a higher version than *; Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 3.5(rel,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7d,4.0,and avoid the version 3.5(rel),3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7d,4.0; Upgrade cisco vpn_3005_concentrator_software to a higher version than 4.0.1,and avoid the version 4.0.1; Upgrade cisco vpn_3002_hardware_client to a higher version than *