CVE:CVE-2005-0943
CNNVD:CNNVD-200503-157
远程攻击者可以借助运行固件4.1.7.A及更早版本的Cisco VPN 3000系列，通过伪装的HTTPS封包实施拒绝服务攻击(设备重新加载或用户连接断开)。
solution:Upgrade cisco vpn_3015_concentrator to a higher version than *; Upgrade cisco vpn_3020_concentrator to a higher version than *; Upgrade cisco vpn_3030_concentator to a higher version than *; Upgrade cisco vpn_3060_concentrator to a higher version than *; Upgrade cisco vpn_3080_concentrator to a higher version than *; Upgrade cisco vpn_3000_concentrator_series_software to a higher version than 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel,3.1.1,3.1.2,3.1.4,3.5(rel,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7.f,3.6.7d,4.0,4.0.1,4.0.5.b,4.1,4.1.5.b,4.1.7.a,and avoid the version 2.0,2.5.2.a,2.5.2.b,2.5.2.c,2.5.2.d,2.5.2.f,3.0,3.0.3.a,3.0.3.b,3.0.4,3.1,3.1(rel),3.1.1,3.1.2,3.1.4,3.5(rel),3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.6,3.6.1,3.6.3,3.6.5,3.6.7,3.6.7.a,3.6.7.b,3.6.7.c,3.6.7.d,3.6.7.f,3.6.7d,4.0,4.0.1,4.0.5.b,4.1,4.1.5.b,4.1.7.a; Upgrade cisco vpn_3005_concentrator_software to a higher version than 4.0.1,and avoid the version 4.0.1; Upgrade cisco vpn_3002_hardware_client to a higher version than *